{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "WorkCentre 7235 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "WorkCentre 7132 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "WorkCentre 7228 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "WorkCentre 7245.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDes entr\u00e9es mal filtr\u00e9es fournies au serveur d\u0027application Internet de\nXerox WorkCentre permetttent d\u0027ins\u00e9rer du code de fa\u00e7on arbitraire. Ce\ncode peut \u00eatre ex\u00e9cut\u00e9 par le navigateur de l\u0027utilisateur lors de la\nvisite d\u0027une page malveillante.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-05-28T00:00:00",
  "last_revision_date": "2008-05-28T00:00:00",
  "links": [],
  "reference": "CERTA-2008-AVI-272",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-05-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 affectant \u003cspan class=\"textit\"\u003eXerox WorkCentre\u003c/span\u003e\npermet \u00e0 une personne malveillante d\u0027effectuer une injection de code\nindirecte.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Xerox WorkCentre",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Xerox XRX08-004 du 22 mai 2008",
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf"
    }
  ]
}