CVE-2013-4204: XSS
Published Nov 15, 2013
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
30 affected components
Google Web Toolkit<=2.5.0
Google Web Toolkit=1.4.60
Google Web Toolkit=1.5.0-rc
Google Web Toolkit=1.5.1-rc2
Google Web Toolkit=1.5.2
Google Web Toolkit=1.5.3
Google Web Toolkit=1.6.2-rc
Google Web Toolkit=1.6.3-rc2
Google Web Toolkit=1.6.4
Google Web Toolkit=1.7.0
Google Web Toolkit=1.7.1
Google Web Toolkit=2.0.0
Google Web Toolkit=2.0.0-rc1
Google Web Toolkit=2.0.1
Google Web Toolkit=2.0.2
Google Web Toolkit=2.0.3
Google Web Toolkit=2.0.4
Google Web Toolkit=2.1.0-m1
Google Web Toolkit=2.1.0-m2
Google Web Toolkit=2.1.0-m3
Google Web Toolkit=2.1.0-rc1
Google Web Toolkit=2.1.1
Google Web Toolkit=2.2.0
Google Web Toolkit=2.3.0
Google Web Toolkit=2.3.0-m1
Google Web Toolkit=2.4-beta
Google Web Toolkit=2.4.0
Google Web Toolkit=2.4.5
Google Web Toolkit=2.5.0-rc1
Google Web Toolkit=2.5.0-rc2
Remediation
Patch Available
Patch Available
Event History
Nov 15, 2013
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4204?
CVE-2013-4204 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-4204?
To fix CVE-2013-4204, upgrade Google Web Toolkit to version 2.5.1 RC1 or later.
3
What types of vulnerabilities are associated with CVE-2013-4204?
CVE-2013-4204 contains multiple cross-site scripting (XSS) vulnerabilities.
4
Which versions of Google Web Toolkit are affected by CVE-2013-4204?
CVE-2013-4204 affects all Google Web Toolkit versions prior to 2.5.1 RC1, including various releases of versions 1.x and 2.x.
5
Can attackers exploit CVE-2013-4204 remotely?
Yes, attackers can exploit CVE-2013-4204 remotely to inject arbitrary web scripts or HTML.