CVE-2013-0195

Опубликовано: 20 нояб. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194.

Ссылки

http://www.openwall.com/lists/oss-security/2013/01/17/15
Mailing List
Third Party Advisory
https://matomo.org/changelog/piwik-1-10/
Release Notes
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-0195
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/01/17/15
Mailing List
Third Party Advisory
https://matomo.org/changelog/piwik-1-10/
Release Notes
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-0195
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*

Версия до 1.10.1 (исключая)

EPSS

Процентиль: 64%

0.00472

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-0195

CVSS3: 6.1

ubuntu

около 6 лет назад

CVE-2013-0195

CVSS3: 6.1

debian

около 6 лет назад

Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attack ...

GHSA-rwvr-hj88-mr86

github

почти 4 года назад

EPSS

Процентиль: 64%

0.00472

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79