Bug 886778 (CVE-2012-4563)

Summary:	CVE-2012-4563 GWT: unknown XSS flaw
Product:	[Other] Security Response	Reporter:	David Jorm <djorm>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	mjc, pcheung
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-12-13 05:58:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description David Jorm 2012-12-13 05:56:06 UTC

An unknown cross-site scripting (XSS) vulnerability has been resolved in Google Web Toolkit (GWT) 2.4. Only GWT 2.4 beta and release candidate builds are affected.

Comment 1 David Jorm 2012-12-13 05:58:55 UTC

Statement:

Not vulnerable. This issue does not affect the versions of GWT shipped with any Red Hat products.

Comment 2 Martin Prpič 2014-11-07 11:58:38 UTC

External References:

http://www.gwtproject.org/release-notes.html#Release_Notes_2_4_0