CVE-2013-6395: XSS
Published Dec 5, 2013
·Updated
Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the hostregex parameter to the default URI, which is processed by getcontext.php.
Affected Software
2 affected components
Ganglia Ganglia-web=3.5.8
Ganglia Ganglia-web=3.5.10
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Dec 5, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6395?
CVE-2013-6395 is classified as a medium-severity cross-site scripting vulnerability.
2
How do I fix CVE-2013-6395?
To fix CVE-2013-6395, update Ganglia Web to version 3.5.11 or later, which addresses this vulnerability.
3
What are the affected versions in CVE-2013-6395?
The affected versions in CVE-2013-6395 are Ganglia Web versions 3.5.8 and 3.5.10.
4
What type of vulnerability is CVE-2013-6395?
CVE-2013-6395 is a cross-site scripting (XSS) vulnerability that allows remote code injection.
5
Can CVE-2013-6395 lead to data compromise?
Yes, CVE-2013-6395 can potentially lead to data compromise by allowing attackers to inject and execute arbitrary scripts.