PT-2018-4110 · Paypal · Paypal

Publicado 2018-04-27 · Atualizado 2018-06-07 · CVE-2013-7202

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PayPal versions 5.3 and earlier

Description The issue allows remote attackers to execute arbitrary JavaScript on the system via the WebHybridClient class.

Recommendations For versions 5.3 and earlier, update to a version later than 5.3 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-7202

Produtos afetados

Paypal

Referências · 4

• https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7202 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92099 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7202 · Nota de Segurança