CVE-2013-3484
Published Apr 2, 2014
Last updated 11 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to application/login/login.html, (2) my_account_login parameter to c/portal_public/login, or (3) email parameter to forgotPassword.
- Source
- PSIRT-CNA@flexerasoftware.com
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80A56156-7AFC-48A7-AF7F-9963A87E5ED4",
"versionEndIncluding": "2.3.1"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:1.9.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B65D0FCA-6BE7-46E1-AE24-86BFEA79D2E8"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EF64AEE-4972-4191-9377-EC0CF8DB986B"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDF66201-ED3F-4CF3-B009-6109D0EFB515"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "420424CF-4464-4556-A229-27DAD6896206"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E8548B4-26AC-4491-BEAE-F05AFBD014C0"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0EA0C69-F2D1-4E37-852D-1CDC7805584F"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C4DE8A1-3E0C-46EE-BF31-4D1A1A4A95ED"
},
{
"criteria": "cpe:2.3:a:dotcms:dotcms:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D300E3B6-5AEE-48FC-BE41-8B149D3C00E3"
}
],
"operator": "OR"
}
]
}
]