exploitDog

CVE-2013-4106

Опубликовано: 14 нояб. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

Ссылки

https://tobtu.com/decryptocat.php
Vendor Advisory
https://vuldb.com/pl/?id.9433
Permissions Required
Third Party Advisory
https://www.openwall.com/lists/oss-security/2013/07/10/15
Mailing List
Third Party Advisory
https://www.securityfocus.com/bid/61099
Third Party Advisory
VDB Entry
https://tobtu.com/decryptocat.php
Vendor Advisory
https://vuldb.com/pl/?id.9433
Permissions Required
Third Party Advisory
https://www.openwall.com/lists/oss-security/2013/07/10/15
Mailing List
Third Party Advisory
https://www.securityfocus.com/bid/61099
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cryptocat_project:cryptocat:*:*:*:*:*:*:*:*

Версия до 2.0.22 (исключая)

EPSS

Процентиль: 74%

0.00795

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-w6ww-rjpp-j73g

github

почти 4 года назад

A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

EPSS

Процентиль: 74%

0.00795

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79