CVE-2012-6369
1password - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.
Scores
EPSS
0.0022
EPSS Percentile
45.0%
Details
CWE
CWE-79
Status
published
Products (2)
1password/1password
n/a/n/a
Published
Dec 28, 2012
Tracked Since
Feb 18, 2026