CVE-2013-5976: XSS
Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRHSession cookie.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5976?
CVE-2013-5976 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-5976?
To mitigate CVE-2013-5976, update to a version of F5 BIG-IP APM that is not vulnerable, such as 10.2.5 or later for versions below 11.0.0.
What versions are affected by CVE-2013-5976?
CVE-2013-5976 affects F5 BIG-IP APM versions 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0.
What does CVE-2013-5976 exploit?
CVE-2013-5976 exploits a vulnerability in the access policy logout page allowing attackers to inject malicious scripts via cookies.
Can CVE-2013-5976 be exploited remotely?
Yes, CVE-2013-5976 can be exploited remotely by attackers who can manipulate the LastMRH_Session cookie.