PT-2013-5004 · Red Hat · Red Hat Enterprise Mrg Grid

Tomáš Nováčik

·

Publicado

2013-12-23

·

Atualizado

2023-02-13

·

CVE-2013-4414

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG Grid version 2.4
Description A cross-site scripting (XSS) issue exists in the web interface for cumin, allowing remote attackers to inject arbitrary web script or HTML via the Max allowance field in the "Set limit" form.
Recommendations For Red Hat Enterprise MRG Grid version 2.4, update the software to a version that includes a fix for this issue, as no specific workaround is provided.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-4414
RHSA-2013:1851
RHSA-2013:1852

Produtos afetados

Red Hat Enterprise Mrg Grid