CVE-2013-4430: XSS
Published May 19, 2014
·Updated
Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php.
Affected Software
24 affected components
Mahara Mahara=1.7.-rc1
Mahara Mahara=1.7.0
Mahara Mahara=1.7.1
Mahara Mahara=1.7.2
Mahara Mahara=1.6.0
Mahara Mahara=1.6.1
Mahara Mahara=1.6.2
Mahara Mahara=1.6.3
Mahara Mahara=1.6.4
Mahara Mahara=1.6.5
Mahara Mahara=1.6.6
Mahara Mahara<=1.5.11
Mahara Mahara=1.5-rc1
Mahara Mahara=1.5-rc2
Mahara Mahara=1.5.0
Mahara Mahara=1.5.1
Mahara Mahara=1.5.2
Mahara Mahara=1.5.3
Mahara Mahara=1.5.4
Mahara Mahara=1.5.6
Mahara Mahara=1.5.7
Mahara Mahara=1.5.8
Mahara Mahara=1.5.9
Mahara Mahara=1.5.10
Event History
May 19, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4430?
CVE-2013-4430 has a medium severity level, indicating a moderate risk for exploitation.
2
How do I fix CVE-2013-4430?
To fix CVE-2013-4430, upgrade Mahara to versions 1.5.12, 1.6.7, or 1.7.3 or later.
3
Who is affected by CVE-2013-4430?
CVE-2013-4430 affects Mahara versions prior to 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3.
4
What type of vulnerability is CVE-2013-4430?
CVE-2013-4430 is classified as a cross-site scripting (XSS) vulnerability.
5
What can attackers do with CVE-2013-4430?
Attackers exploiting CVE-2013-4430 can inject arbitrary web scripts or HTML into the affected Mahara instance.