PT-2013-4895 · Google · Google Web Toolkit

David Jorm · Published 2013-11-15 · Updated 2023-02-13 · CVE-2013-4204

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Web Toolkit versions prior to 2.5.1 RC1

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the JUnit files within the GWTTestCase of Google Web Toolkit. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For versions prior to 2.5.1 RC1, update to version 2.5.1 RC1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-4204

GHSA-X24Q-XWRF-66JM

Affected Products

Google Web Toolkit

References · 9

• http://openwall.com/lists/oss-security/2013/08/05/3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2013-4204 · Security Note
• http://openwall.com/lists/oss-security/2013/08/05/1 · Patch
• https://osv.dev/vulnerability/GHSA-x24q-xwrf-66jm · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2013-4204 · Note
• http://securityfocus.com/bid/61590 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=992911 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4204 · Note
• http://gwtproject.org/release-notes.html#Release_Notes_2_5_1_RC1 · Note