CVE-2014-2966

The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text…

published July 26, 2014

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text restrictions via crafted characters, as demonstrated by bypassing an XSS protection mechanism.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01665 · 76.4th percentile
Published
2014-07-26T15:00Z
EPSS history
Timeline
  • 26 JUL 15:00Z
    The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text…
    cvelistv5