XSS in 1password

CVE-2012-6369

Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.

Affected products

  • 1password — versions 3.9.9
  • N/a — versions n/a

Weakness classification (CWE)

References