CVE-2013-4204: XSS
First published: Fri Nov 15 2013(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Web Toolkit | <=2.5.0 | |
| Google Web Toolkit | =1.4.60 | |
| Google Web Toolkit | =1.5.0-rc | |
| Google Web Toolkit | =1.5.1-rc2 | |
| Google Web Toolkit | =1.5.2 | |
| Google Web Toolkit | =1.5.3 | |
| Google Web Toolkit | =1.6.2-rc | |
| Google Web Toolkit | =1.6.3-rc2 | |
| Google Web Toolkit | =1.6.4 | |
| Google Web Toolkit | =1.7.0 | |
| Google Web Toolkit | =1.7.1 | |
| Google Web Toolkit | =2.0.0 | |
| Google Web Toolkit | =2.0.0-rc1 | |
| Google Web Toolkit | =2.0.1 | |
| Google Web Toolkit | =2.0.2 | |
| Google Web Toolkit | =2.0.3 | |
| Google Web Toolkit | =2.0.4 | |
| Google Web Toolkit | =2.1.0-m1 | |
| Google Web Toolkit | =2.1.0-m2 | |
| Google Web Toolkit | =2.1.0-m3 | |
| Google Web Toolkit | =2.1.0-rc1 | |
| Google Web Toolkit | =2.1.1 | |
| Google Web Toolkit | =2.2.0 | |
| Google Web Toolkit | =2.3.0 | |
| Google Web Toolkit | =2.3.0-m1 | |
| Google Web Toolkit | =2.4-beta | |
| Google Web Toolkit | =2.4.0 | |
| Google Web Toolkit | =2.4.5 | |
| Google Web Toolkit | =2.5.0-rc1 | |
| Google Web Toolkit | =2.5.0-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4204?
CVE-2013-4204 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-4204?
To fix CVE-2013-4204, upgrade Google Web Toolkit to version 2.5.1 RC1 or later.
What types of vulnerabilities are associated with CVE-2013-4204?
CVE-2013-4204 contains multiple cross-site scripting (XSS) vulnerabilities.
Which versions of Google Web Toolkit are affected by CVE-2013-4204?
CVE-2013-4204 affects all Google Web Toolkit versions prior to 2.5.1 RC1, including various releases of versions 1.x and 2.x.
Can attackers exploit CVE-2013-4204 remotely?
Yes, attackers can exploit CVE-2013-4204 remotely to inject arbitrary web scripts or HTML.
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/google
- canonical/google web toolkit
- version/google web toolkit/2.5.0
- version/google web toolkit/1.4.60
- version/google web toolkit/1.5.0-rc
- version/google web toolkit/1.5.1-rc2
- version/google web toolkit/1.5.2
- version/google web toolkit/1.5.3
- version/google web toolkit/1.6.2-rc
- version/google web toolkit/1.6.3-rc2
- version/google web toolkit/1.6.4
- version/google web toolkit/1.7.0
- version/google web toolkit/1.7.1
- version/google web toolkit/2.0.0
- version/google web toolkit/2.0.0-rc1
- version/google web toolkit/2.0.1
- version/google web toolkit/2.0.2
- version/google web toolkit/2.0.3
- version/google web toolkit/2.0.4
- version/google web toolkit/2.1.0-m1
- version/google web toolkit/2.1.0-m2
- version/google web toolkit/2.1.0-m3
- version/google web toolkit/2.1.0-rc1
- version/google web toolkit/2.1.1
- version/google web toolkit/2.2.0
- version/google web toolkit/2.3.0
- version/google web toolkit/2.3.0-m1
- version/google web toolkit/2.4-beta
- version/google web toolkit/2.4.0
- version/google web toolkit/2.4.5
- version/google web toolkit/2.5.0-rc1
- version/google web toolkit/2.5.0-rc2