What is the severity of CVE-2013-0181?

The severity of CVE-2013-0181 is considered medium due to its potential for remote exploitation via cross-site scripting.

How do I fix CVE-2013-0181?

To fix CVE-2013-0181, upgrade the Search API module to version 7.x-1.4 or later.

Which versions of the Search API are affected by CVE-2013-0181?

CVE-2013-0181 affects Search API versions 7.x-1.x before 7.x-1.4, including all betas and release candidates up to 7.x-1.3.

Can CVE-2013-0181 be exploited by local attackers?

CVE-2013-0181 is primarily a remote exploit, meaning it is not easily exploitable by local attackers.

What type of vulnerability is CVE-2013-0181?

CVE-2013-0181 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.

Vulnerability/
CVE-2013-0181

low

2.6

CWE

27/3/2013

6/8/2024

CVE-2013-0181: XSS

First published: Wed Mar 27 2013(Updated: )

Cross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Thomas Seidl Search Api	=7.x-1.0
Thomas Seidl Search Api	=7.x-1.0-beta1
Thomas Seidl Search Api	=7.x-1.0-beta10
Thomas Seidl Search Api	=7.x-1.0-beta2
Thomas Seidl Search Api	=7.x-1.0-beta3
Thomas Seidl Search Api	=7.x-1.0-beta4
Thomas Seidl Search Api	=7.x-1.0-beta5
Thomas Seidl Search Api	=7.x-1.0-beta6
Thomas Seidl Search Api	=7.x-1.0-beta7
Thomas Seidl Search Api	=7.x-1.0-beta8
Thomas Seidl Search Api	=7.x-1.0-beta9
Thomas Seidl Search Api	=7.x-1.0-rc1
Thomas Seidl Search Api	=7.x-1.1
Thomas Seidl Search Api	=7.x-1.2
Thomas Seidl Search Api	=7.x-1.3
Thomas Seidl Search Api	=7.x-1.x-dev
Drupal Drupal

Remedy

https://drupal.org/node/1884076

Remedy

https://drupal.org/node/1884332

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-0181?
The severity of CVE-2013-0181 is considered medium due to its potential for remote exploitation via cross-site scripting.
How do I fix CVE-2013-0181?
To fix CVE-2013-0181, upgrade the Search API module to version 7.x-1.4 or later.
Which versions of the Search API are affected by CVE-2013-0181?
CVE-2013-0181 affects Search API versions 7.x-1.x before 7.x-1.4, including all betas and release candidates up to 7.x-1.3.
Can CVE-2013-0181 be exploited by local attackers?
CVE-2013-0181 is primarily a remote exploit, meaning it is not easily exploitable by local attackers.
What type of vulnerability is CVE-2013-0181?
CVE-2013-0181 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.

collector/nvd-index
agent/references
agent/type
agent/remedy
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/author
agent/severity
agent/tags
agent/description
agent/event
agent/first-publish-date
agent/source
vendor/thomas seidl
canonical/thomas seidl search api
version/thomas seidl search api/7.x-1.0
version/thomas seidl search api/7.x-1.0-beta1
version/thomas seidl search api/7.x-1.0-beta10
version/thomas seidl search api/7.x-1.0-beta2
version/thomas seidl search api/7.x-1.0-beta3
version/thomas seidl search api/7.x-1.0-beta4
version/thomas seidl search api/7.x-1.0-beta5
version/thomas seidl search api/7.x-1.0-beta6
version/thomas seidl search api/7.x-1.0-beta7
version/thomas seidl search api/7.x-1.0-beta8
version/thomas seidl search api/7.x-1.0-beta9
version/thomas seidl search api/7.x-1.0-rc1
version/thomas seidl search api/7.x-1.1
version/thomas seidl search api/7.x-1.2
version/thomas seidl search api/7.x-1.3
version/thomas seidl search api/7.x-1.x-dev
vendor/drupal
canonical/drupal drupal

Frequently Asked Questions

What is the severity of CVE-2013-0181?
The severity of CVE-2013-0181 is considered medium due to its potential for remote exploitation via cross-site scripting.
How do I fix CVE-2013-0181?
To fix CVE-2013-0181, upgrade the Search API module to version 7.x-1.4 or later.
Which versions of the Search API are affected by CVE-2013-0181?
CVE-2013-0181 affects Search API versions 7.x-1.x before 7.x-1.4, including all betas and release candidates up to 7.x-1.3.
Can CVE-2013-0181 be exploited by local attackers?
CVE-2013-0181 is primarily a remote exploit, meaning it is not easily exploitable by local attackers.
What type of vulnerability is CVE-2013-0181?
CVE-2013-0181 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.

CVE-2013-0181: XSS

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-0181?

How do I fix CVE-2013-0181?

Which versions of the Search API are affected by CVE-2013-0181?

Can CVE-2013-0181 be exploited by local attackers?

What type of vulnerability is CVE-2013-0181?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2013-0181?

How do I fix CVE-2013-0181?

Which versions of the Search API are affected by CVE-2013-0181?

Can CVE-2013-0181 be exploited by local attackers?

What type of vulnerability is CVE-2013-0181?