CVE-2013-3572: XSS
Published Dec 31, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname.
Affected Software
2 affected components
UI UniFi Controller<2.3.6
UI UniFi<=2.3.5
Event History
Dec 31, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3572?
CVE-2013-3572 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2013-3572?
To fix CVE-2013-3572, update the UniFi Controller to version 2.3.6 or later.
3
What products are affected by CVE-2013-3572?
CVE-2013-3572 affects Ubiquiti Networks UniFi Controller versions 2.3.5 and earlier.
4
Can CVE-2013-3572 be exploited remotely?
Yes, CVE-2013-3572 can be exploited remotely by injecting arbitrary web scripts through the crafted client hostname.
5
What type of vulnerability is CVE-2013-3572?
CVE-2013-3572 is a cross-site scripting (XSS) vulnerability.