CVE-2013-7370

Published: Dec 11, 2019Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware

Affected (6)

Products: Redhat: Openshift · Sencha: Connect · Opensuse: Opensuse · +1 more

Show all products

Redhat: Openshift · Sencha: Connect · Opensuse: Opensuse · Debian: Debian Linux

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift	Version 2.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Sencha Connect	Before 2.8.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (14)

http://www.openwall.com/lists/oss-security/2014/04/21/2

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/05/13/1

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://access.redhat.com/security/cve/cve-2013-7370

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370

Source: secalert@redhat.com

Issue Tracking

https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting

Source: secalert@redhat.com

Broken LinkThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2013-7370

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2014/04/21/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/05/13/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://access.redhat.com/security/cve/cve-2013-7370

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2013-7370

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.