CVE-2013-6395

Опубликовано: 05 дек. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php.

Ссылки

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507
Exploit
Patch
http://osvdb.org/100380
http://seclists.org/oss-sec/2013/q4/346
Exploit
Patch
http://secunia.com/advisories/55854
Vendor Advisory
http://www.rusty-ice.de/advisory/advisory_2013002.txt
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/89272
https://github.com/ganglia/ganglia-web/issues/218
Exploit
Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507
Exploit
Patch
http://osvdb.org/100380
http://seclists.org/oss-sec/2013/q4/346
Exploit
Patch
http://secunia.com/advisories/55854
Vendor Advisory
http://www.rusty-ice.de/advisory/advisory_2013002.txt
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/89272
https://github.com/ganglia/ganglia-web/issues/218
Exploit
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ganglia:ganglia-web:3.5.8:*:*:*:*:*:*:*

cpe:2.3:a:ganglia:ganglia-web:3.5.10:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00573

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-6395

ubuntu

около 12 лет назад

CVE-2013-6395

debian

около 12 лет назад

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web ...

GHSA-xx3m-g78m-fjqh

github

больше 3 лет назад

EPSS

Процентиль: 68%

0.00573

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79