PT-2019-6929 · Cryptocat · Cryptocat Message Handling

Publicado 2019-11-14 · Atualizado 2019-11-18 · CVE-2013-4109

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cryptocat Message Handling version 1.1.165

Description A cross-site scripting (XSS) issue affects the message handling component. This could potentially allow for malicious script execution.

Recommendations For Cryptocat Message Handling version 1.1.165, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-4109

Produtos afetados

Cryptocat Message Handling

Referências · 5

• https://vuldb.com/es/?id.9445 · Nota
• https://tobtu.com/decryptocat.php · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2013/07/10/15 · Nota
• https://securityfocus.com/bid/61097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4109 · Nota de Segurança