CVE-2013-6901: XSS

Q: What is the severity of CVE-2013-6901?

CVE-2013-6901 is classified as a Cross-site Scripting (XSS) vulnerability which can lead to significant security risks for users.

Q: How do I fix CVE-2013-6901?

To remediate CVE-2013-6901, upgrade Cybozu Garoon to version 3.7.0 or later.

Q: What versions of Cybozu Garoon are affected by CVE-2013-6901?

CVE-2013-6901 affects Cybozu Garoon versions 2.0 through 3.5 and their respective service packs.

Q: Can CVE-2013-6901 be exploited in browsers other than Firefox?

CVE-2013-6901 specifically affects Firefox; its exploitation potential may not apply to other browsers.

Q: What is the impact of CVE-2013-6901 on users?

The impact of CVE-2013-6901 includes potential injection of malicious scripts that could compromise user data and session integrity.

Published Dec 5, 2013

Updated

Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

60 affected components

Cybozu Garoon<=3.5

Cybozu Garoon=2.0-sp1

Cybozu Garoon=2.0-sp2

Cybozu Garoon=2.0-sp3

Cybozu Garoon=2.0-sp4

Cybozu Garoon=2.0-sp5

Cybozu Garoon=2.0-sp6

Cybozu Garoon=2.1

Cybozu Garoon=2.1-sp1

Cybozu Garoon=2.1-sp2

Cybozu Garoon=2.1-sp3

Cybozu Garoon=2.5

Cybozu Garoon=2.5-sp1

Cybozu Garoon=2.5-sp2

Cybozu Garoon=2.5-sp3

Cybozu Garoon=2.5-sp4

Cybozu Garoon=3.0

Cybozu Garoon=3.0-sp1

Cybozu Garoon=3.0-sp2

Cybozu Garoon=3.0-sp3

Cybozu Garoon=3.1

Cybozu Garoon=3.1-sp1

Cybozu Garoon=3.1-sp2

Cybozu Garoon=3.1-sp3

Cybozu Garoon=3.5

Cybozu Garoon=3.5-sp1

Cybozu Garoon=3.5-sp2

Cybozu Garoon=3.5-sp3

Cybozu Garoon=3.5-sp4

Mozilla Firefox

All of the following

Any of the following