CVE-2013-2023: XSS
First published: Thu Aug 15 2013(Updated: )
Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to incomplete blacklists, a different vulnerability than CVE-2013-1942 and CVE-2013-2022.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Happyworm Jplayer | <=2.3.0 | |
| Happyworm Jplayer | =0.2.1-beta | |
| Happyworm Jplayer | =0.2.2-beta | |
| Happyworm Jplayer | =0.2.3-beta | |
| Happyworm Jplayer | =0.2.4-beta | |
| Happyworm Jplayer | =0.2.5-beta | |
| Happyworm Jplayer | =1.0.0 | |
| Happyworm Jplayer | =1.1.0 | |
| Happyworm Jplayer | =1.1.1 | |
| Happyworm Jplayer | =1.2.0 | |
| Happyworm Jplayer | =2.0.0 | |
| Happyworm Jplayer | =2.0.1 | |
| Happyworm Jplayer | =2.0.2 | |
| Happyworm Jplayer | =2.0.3 | |
| Happyworm Jplayer | =2.0.4 | |
| Happyworm Jplayer | =2.0.5 | |
| Happyworm Jplayer | =2.0.6 | |
| Happyworm Jplayer | =2.0.7 | |
| Happyworm Jplayer | =2.0.8 | |
| Happyworm Jplayer | =2.0.9 | |
| Happyworm Jplayer | =2.0.10 | |
| Happyworm Jplayer | =2.0.11 | |
| Happyworm Jplayer | =2.0.12 | |
| Happyworm Jplayer | =2.0.13 | |
| Happyworm Jplayer | =2.0.14 | |
| Happyworm Jplayer | =2.0.15 | |
| Happyworm Jplayer | =2.0.16 | |
| Happyworm Jplayer | =2.0.17 | |
| Happyworm Jplayer | =2.0.18 | |
| Happyworm Jplayer | =2.0.19 | |
| Happyworm Jplayer | =2.0.20 | |
| Happyworm Jplayer | =2.0.21 | |
| Happyworm Jplayer | =2.0.22 | |
| Happyworm Jplayer | =2.0.23 | |
| Happyworm Jplayer | =2.0.24 | |
| Happyworm Jplayer | =2.0.25 | |
| Happyworm Jplayer | =2.0.26 | |
| Happyworm Jplayer | =2.0.27 | |
| Happyworm Jplayer | =2.0.28 | |
| Happyworm Jplayer | =2.0.29 | |
| Happyworm Jplayer | =2.0.30 | |
| Happyworm Jplayer | =2.0.31 | |
| Happyworm Jplayer | =2.0.32 | |
| Happyworm Jplayer | =2.0.33 | |
| Happyworm Jplayer | =2.0.34 | |
| Happyworm Jplayer | =2.0.35 | |
| Happyworm Jplayer | =2.0.36 | |
| Happyworm Jplayer | =2.1.0 | |
| Happyworm Jplayer | =2.1.1 | |
| Happyworm Jplayer | =2.1.2 | |
| Happyworm Jplayer | =2.1.3 | |
| Happyworm Jplayer | =2.1.4 | |
| Happyworm Jplayer | =2.1.5 | |
| Happyworm Jplayer | =2.1.6 | |
| Happyworm Jplayer | =2.2.0 | |
| Happyworm Jplayer | =2.2.1 | |
| Happyworm Jplayer | =2.2.2 | |
| Happyworm Jplayer | =2.2.3 | |
| Happyworm Jplayer | =2.2.4 | |
| Happyworm Jplayer | =2.2.5 | |
| Happyworm Jplayer | =2.2.6 | |
| Happyworm Jplayer | =2.2.7 | |
| Happyworm Jplayer | =2.2.8 | |
| Happyworm Jplayer | =2.2.9 | |
| Happyworm Jplayer | =2.2.10 | |
| Happyworm Jplayer | =2.2.11 | |
| Happyworm Jplayer | =2.2.12 | |
| Happyworm Jplayer | =2.2.13 | |
| Happyworm Jplayer | =2.2.14 | |
| Happyworm Jplayer | =2.2.15 | |
| Happyworm Jplayer | =2.2.16 | |
| Happyworm Jplayer | =2.2.17 | |
| Happyworm Jplayer | =2.2.18 | |
| Happyworm Jplayer | =2.2.19 | |
| Happyworm Jplayer | =2.2.20 | |
| Happyworm Jplayer | =2.2.21 | |
| Happyworm Jplayer | =2.2.22 | |
| Happyworm Jplayer | =2.2.23 | |
| Happyworm Jplayer | =2.2.24 | |
| Happyworm Jplayer | =2.2.25 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=oss-security&m=136570964825921&w=2
- http://marc.info/?l=oss-security&m=136726705917858&w=2
- http://marc.info/?l=oss-security&m=136773622321563&w=2
- http://seclists.org/fulldisclosure/2013/Apr/192
- http://www.jplayer.org/latest/release-notes/
- http://www.openwall.com/lists/oss-security/2013/06/27/7
- http://www.openwall.com/lists/oss-security/2013/07/04/5
- https://github.com/happyworm/jPlayer/commit/8ccc429598d62eebe9f65a0a4e6fd406a123c8b4
- https://github.com/happyworm/jPlayer/commit/c2417972af1295be8dcc07470b0e3d25b0a77e0b
- https://github.com/happyworm/jPlayer/issues/162
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/happyworm
- canonical/happyworm jplayer
- version/happyworm jplayer/2.3.0
- version/happyworm jplayer/0.2.1-beta
- version/happyworm jplayer/0.2.2-beta
- version/happyworm jplayer/0.2.3-beta
- version/happyworm jplayer/0.2.4-beta
- version/happyworm jplayer/0.2.5-beta
- version/happyworm jplayer/1.0.0
- version/happyworm jplayer/1.1.0
- version/happyworm jplayer/1.1.1
- version/happyworm jplayer/1.2.0
- version/happyworm jplayer/2.0.0
- version/happyworm jplayer/2.0.1
- version/happyworm jplayer/2.0.2
- version/happyworm jplayer/2.0.3
- version/happyworm jplayer/2.0.4
- version/happyworm jplayer/2.0.5
- version/happyworm jplayer/2.0.6
- version/happyworm jplayer/2.0.7
- version/happyworm jplayer/2.0.8
- version/happyworm jplayer/2.0.9
- version/happyworm jplayer/2.0.10
- version/happyworm jplayer/2.0.11
- version/happyworm jplayer/2.0.12
- version/happyworm jplayer/2.0.13
- version/happyworm jplayer/2.0.14
- version/happyworm jplayer/2.0.15
- version/happyworm jplayer/2.0.16
- version/happyworm jplayer/2.0.17
- version/happyworm jplayer/2.0.18
- version/happyworm jplayer/2.0.19
- version/happyworm jplayer/2.0.20
- version/happyworm jplayer/2.0.21
- version/happyworm jplayer/2.0.22
- version/happyworm jplayer/2.0.23
- version/happyworm jplayer/2.0.24
- version/happyworm jplayer/2.0.25
- version/happyworm jplayer/2.0.26
- version/happyworm jplayer/2.0.27
- version/happyworm jplayer/2.0.28
- version/happyworm jplayer/2.0.29
- version/happyworm jplayer/2.0.30
- version/happyworm jplayer/2.0.31
- version/happyworm jplayer/2.0.32
- version/happyworm jplayer/2.0.33
- version/happyworm jplayer/2.0.34
- version/happyworm jplayer/2.0.35
- version/happyworm jplayer/2.0.36
- version/happyworm jplayer/2.1.0
- version/happyworm jplayer/2.1.1
- version/happyworm jplayer/2.1.2
- version/happyworm jplayer/2.1.3
- version/happyworm jplayer/2.1.4
- version/happyworm jplayer/2.1.5
- version/happyworm jplayer/2.1.6
- version/happyworm jplayer/2.2.0
- version/happyworm jplayer/2.2.1
- version/happyworm jplayer/2.2.2
- version/happyworm jplayer/2.2.3
- version/happyworm jplayer/2.2.4
- version/happyworm jplayer/2.2.5
- version/happyworm jplayer/2.2.6
- version/happyworm jplayer/2.2.7
- version/happyworm jplayer/2.2.8
- version/happyworm jplayer/2.2.9
- version/happyworm jplayer/2.2.10
- version/happyworm jplayer/2.2.11
- version/happyworm jplayer/2.2.12
- version/happyworm jplayer/2.2.13
- version/happyworm jplayer/2.2.14
- version/happyworm jplayer/2.2.15
- version/happyworm jplayer/2.2.16
- version/happyworm jplayer/2.2.17
- version/happyworm jplayer/2.2.18
- version/happyworm jplayer/2.2.19
- version/happyworm jplayer/2.2.20
- version/happyworm jplayer/2.2.21
- version/happyworm jplayer/2.2.22
- version/happyworm jplayer/2.2.23
- version/happyworm jplayer/2.2.24
- version/happyworm jplayer/2.2.25