CVE-2013-5308: XSS
Published Aug 16, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
10 affected components
Juralsulek Realurlmanagement<=0.3.4
Juralsulek Realurlmanagement=0.1.0
Juralsulek Realurlmanagement=0.2.0
Juralsulek Realurlmanagement=0.2.1
Juralsulek Realurlmanagement=0.2.2
Juralsulek Realurlmanagement=0.2.3
Juralsulek Realurlmanagement=0.3.0
Juralsulek Realurlmanagement=0.3.2
Juralsulek Realurlmanagement=0.3.3
Typo3 TYPO3
Event History
Aug 16, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5308?
CVE-2013-5308 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-5308?
To fix CVE-2013-5308, upgrade the RealURL Management extension to version 0.3.5 or later.
3
Which versions of RealURL Management are affected by CVE-2013-5308?
CVE-2013-5308 affects RealURL Management extension versions up to and including 0.3.4.
4
What type of attacks can be executed due to CVE-2013-5308?
Due to CVE-2013-5308, attackers can inject arbitrary web scripts or HTML into affected installations.
5
Is TYPO3 itself vulnerable because of CVE-2013-5308?
No, TYPO3 itself is not vulnerable; the issue is specific to the RealURL Management extension.