Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-2138

Опубликовано: 10 окт. 2013
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5

Описание

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

РелизСтатусПримечание
devel

not-affected

lucid

not-affected

precise

not-affected

quantal

not-affected

raring

not-affected

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

not-affected

lucid

not-affected

precise

not-affected

quantal

not-affected

raring

not-affected

upstream

not-affected

Показывать по

EPSS

Процентиль: 79%
0.01207
Низкий

7.5 High

CVSS2

Связанные уязвимости

nvd
больше 12 лет назад

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

debian
больше 12 лет назад

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0 ...

github
больше 3 лет назад

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

EPSS

Процентиль: 79%
0.01207
Низкий

7.5 High

CVSS2