Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-6780

Опубликовано: 11 нояб. 2013
Источник: redhat
CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Satellite 5.6dojoWill not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1030083XSS vulnerability in YUI 2.5.0 through 2.9.0

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2013-6780

ubuntu
около 12 лет назад

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.

nvd логотип

CVE-2013-6780

nvd
около 12 лет назад

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.

debian логотип

CVE-2013-6780

debian
около 12 лет назад

Cross-site scripting (XSS) vulnerability in uploader.swf in the Upload ...

github логотип

GHSA-8795-rjrm-xjf7

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.

4.3 Medium

CVSS2