VDB
GCVE-110-MAGEIA-2014-193
GCVE-110-MAGEIA-2014-193
Advisory Published
Updated cups packages fix security vulnerability:
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix
Printing System (CUPS) before 1.7.2 allows remote attackers to inject
arbitrary web script or HTML via the URL path, related to the is_path_absolute
function (CVE-2014-2856).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | mc | 0 (affected), 4.8.7-3.1.mga3 (unaffected) | — |
| Mageia | cups | 1.7.0-7.1.mga4 (unaffected), 0 (affected), 0 (affected), 1.7.0-7.1.mga4 (unaffected) | — |
| Mageia | mc | 0 (affected), 4.8.11-2.mga4 (unaffected) | — |
| Mageia | cups | 0 (affected), 1.5.4-9.2.mga3 (unaffected), 0 (affected), 1.5.4-9.2.mga3 (unaffected) | — |
Browse GCVE Records
20,323 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.