CVE-2013-2311: XSS
Published May 22, 2013
·Updated
Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
151 affected components
Web2py Web2py<=2.2.1
Web2py Web2py=1.16.0
Web2py Web2py=1.17.0
Web2py Web2py=1.18.0
Web2py Web2py=1.19.0
Web2py Web2py=1.20.0
Web2py Web2py=1.21.0
Web2py Web2py=1.22.0
Web2py Web2py=1.23.0
Web2py Web2py=1.24.0
Web2py Web2py=1.25.0
Web2py Web2py=1.26.0
Web2py Web2py=1.27.0
Web2py Web2py=1.28.0
Web2py Web2py=1.29.0
Web2py Web2py=1.30.0
Web2py Web2py=1.31.0
Web2py Web2py=1.40.0
Web2py Web2py=1.41.0
Web2py Web2py=1.42.0
Web2py Web2py=1.43.0
Web2py Web2py=1.44.0
Web2py Web2py=1.45.0
Web2py Web2py=1.46.0
Web2py Web2py=1.47.0
Web2py Web2py=1.48.0
Web2py Web2py=1.49.0
Web2py Web2py=1.50.0
Web2py Web2py=1.51.0
Web2py Web2py=1.52.0
Web2py Web2py=1.53.0
Web2py Web2py=1.54.0
Web2py Web2py=1.55.0
Web2py Web2py=1.56.0
Web2py Web2py=1.56.1
Web2py Web2py=1.56.2
Web2py Web2py=1.56.3
Web2py Web2py=1.56.4
Web2py Web2py=1.57.0
Web2py Web2py=1.58.0
Web2py Web2py=1.59.0
Web2py Web2py=1.60.0
Web2py Web2py=1.61.0
Web2py Web2py=1.62.0
Web2py Web2py=1.63.0
Web2py Web2py=1.63.1
Web2py Web2py=1.63.2
Web2py Web2py=1.63.3
Web2py Web2py=1.63.4
Web2py Web2py=1.63.5
Web2py Web2py=1.64.0
Web2py Web2py=1.64.2
Web2py Web2py=1.64.3
Web2py Web2py=1.64.4
Web2py Web2py=1.65.0
Web2py Web2py=1.65.1
Web2py Web2py=1.65.2
Web2py Web2py=1.65.3-10
Web2py Web2py=1.65.11
Web2py Web2py=1.65.12
Web2py Web2py=1.65.13
Web2py Web2py=1.66.0
Web2py Web2py=1.67.0
Web2py Web2py=1.67.1
Web2py Web2py=1.67.2
Web2py Web2py=1.68.1
Web2py Web2py=1.68.2
Web2py Web2py=1.69.1
Web2py Web2py=1.70.1
Web2py Web2py=1.71.1
Web2py Web2py=1.72.1
Web2py Web2py=1.72.3
Web2py Web2py=1.73.1
Web2py Web2py=1.74.1
Web2py Web2py=1.74.2-4
Web2py Web2py=1.74.5
Web2py Web2py=1.74.6
Web2py Web2py=1.74.7
Web2py Web2py=1.74.8
Web2py Web2py=1.74.9
Web2py Web2py=1.75.1
Web2py Web2py=1.75.2
Web2py Web2py=1.75.3
Web2py Web2py=1.75.4
Web2py Web2py=1.75.5
Web2py Web2py=1.76.1
Web2py Web2py=1.76.2
Web2py Web2py=1.76.3
Web2py Web2py=1.76.4
Web2py Web2py=1.76.5
Web2py Web2py=1.77.1
Web2py Web2py=1.77.2
Web2py Web2py=1.77.3
Web2py Web2py=1.78.1
Web2py Web2py=1.78.3
Web2py Web2py=1.79.1
Web2py Web2py=1.79.2
Web2py Web2py=1.80.1
Web2py Web2py=1.81.1
Web2py Web2py=1.81.2
Web2py Web2py=1.81.3
Web2py Web2py=1.81.4
Web2py Web2py=1.81.5
Web2py Web2py=1.82.1
Web2py Web2py=1.83.1
Web2py Web2py=1.83.2
Web2py Web2py=1.84.1
Web2py Web2py=1.84.4
Web2py Web2py=1.85.1
Web2py Web2py=1.85.3
Web2py Web2py=1.86.1
Web2py Web2py=1.86.3
Web2py Web2py=1.87.1
Web2py Web2py=1.87.2
Web2py Web2py=1.87.3
Web2py Web2py=1.88.1
Web2py Web2py=1.89.1
Web2py Web2py=1.89.5
Web2py Web2py=1.90.1
Web2py Web2py=1.90.2
Web2py Web2py=1.90.4
Web2py Web2py=1.90.5
Web2py Web2py=1.90.6
Web2py Web2py=1.91.1
Web2py Web2py=1.91.2
Web2py Web2py=1.91.5
Web2py Web2py=1.91.6
Web2py Web2py=1.92.1
Web2py Web2py=1.93.1
Web2py Web2py=1.93.2
Web2py Web2py=1.94.1
Web2py Web2py=1.94.2
Web2py Web2py=1.94.3
Web2py Web2py=1.94.4
Web2py Web2py=1.94.5
Web2py Web2py=1.94.6
Web2py Web2py=1.95.1
Web2py Web2py=1.96.1
Web2py Web2py=1.96.2
Web2py Web2py=1.96.4
Web2py Web2py=1.97.1
Web2py Web2py=1.98.1
Web2py Web2py=1.98.2
Web2py Web2py=1.99.1
Web2py Web2py=1.99.2
Web2py Web2py=1.99.3
Web2py Web2py=1.99.4
Web2py Web2py=1.99.5
Web2py Web2py=1.99.7
Web2py Web2py=2.0.1-11
Web2py Web2py=2.1.0
Event History
May 22, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2311?
CVE-2013-2311 is considered to have a medium severity due to the potential for XSS attacks.
2
How do I fix CVE-2013-2311?
To fix CVE-2013-2311, upgrade to Web2py version 2.3.1 or later.
3
What systems are affected by CVE-2013-2311?
CVE-2013-2311 affects Web2py versions prior to 2.3.1, including specific versions from 1.16.0 to 2.2.1.
4
What type of vulnerability is CVE-2013-2311?
CVE-2013-2311 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-2311 be exploited remotely?
Yes, CVE-2013-2311 can be exploited remotely by attackers to inject arbitrary scripts.