CVE-2013-5326: XSS
First published: Wed Nov 13 2013(Updated: )
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe ColdFusion | =9.0 | |
| Adobe ColdFusion | =9.0.1 | |
| Adobe ColdFusion | =9.0.2 | |
| Adobe ColdFusion | <=10.0 | |
| Adobe ColdFusion | =10.0 | |
| Adobe ColdFusion | =10.0-update1 | |
| Adobe ColdFusion | =10.0-update2 | |
| Adobe ColdFusion | =10.0-update3 | |
| Adobe ColdFusion | =10.0-update4 | |
| Adobe ColdFusion | =10.0-update8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-5326?
CVE-2013-5326 has a medium severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-5326?
To fix CVE-2013-5326, update Adobe ColdFusion to the latest version or apply the specific updates mentioned in the advisory.
Who is affected by CVE-2013-5326?
CVE-2013-5326 affects Adobe ColdFusion versions 9.0, 9.0.1, 9.0.2, and 10 prior to Update 12.
Can CVE-2013-5326 be exploited remotely?
Yes, CVE-2013-5326 can be exploited remotely by authenticated users to inject malicious scripts.
What types of attacks are possible with CVE-2013-5326?
CVE-2013-5326 allows for cross-site scripting (XSS) attacks, enabling the injection of arbitrary web scripts or HTML.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe coldfusion
- version/adobe coldfusion/9.0
- version/adobe coldfusion/9.0.1
- version/adobe coldfusion/9.0.2
- version/adobe coldfusion/10.0
- version/adobe coldfusion/10.0-update1
- version/adobe coldfusion/10.0-update2
- version/adobe coldfusion/10.0-update3
- version/adobe coldfusion/10.0-update4
- version/adobe coldfusion/10.0-update8