CVE-2013-7062: XSS

Q: What is CVE-2013-7062?

CVE-2013-7062 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified input in Zope as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2.

Q: How severe is CVE-2013-7062?

CVE-2013-7062 has a severity rating of 6.1 (medium).

Q: What is the affected software for CVE-2013-7062?

The affected software for CVE-2013-7062 includes Plone versions 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2.

Q: How do I fix CVE-2013-7062?

To fix CVE-2013-7062, it is recommended to upgrade to Plone version 4.3.2, 4.1.6, 4.0.9, or 3.3.6 depending on the affected version.

Q: What is the CWE ID for CVE-2013-7062?

The CWE ID for CVE-2013-7062 is 79.

Published Jan 2, 2020

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the (1) browseridmanager or (2) OFS.Image method.

Affected Software

9 affected componentsFixes available

pip/plone>=4.3<4.3.2

4.3.2

pip/plone>=4.1<4.1.6

4.1.6

pip/plone>=4.0<4.0.9

4.0.9

pip/plone>=3.3<3.3.6

3.3.6

Plone plone>=3.3.0<=3.3.6

Plone plone>=4.0.0<=4.0.9

Plone plone>=4.1.0<=4.1.6

Plone plone>=4.2.0<=4.2.7

Plone plone>=4.3.0<=4.3.2

Event History

Jan 2, 2020

CVE Published

via MITRE·06:18 PM

Data Sourced

via MITRE·06:18 PM

Description

May 5, 2022

Advisory Published

12:29 AM

Frequently Asked Questions

What is CVE-2013-7062?

CVE-2013-7062 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified input in Zope as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2.

How severe is CVE-2013-7062?

CVE-2013-7062 has a severity rating of 6.1 (medium).

What is the affected software for CVE-2013-7062?

The affected software for CVE-2013-7062 includes Plone versions 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2.

How do I fix CVE-2013-7062?

To fix CVE-2013-7062, it is recommended to upgrade to Plone version 4.3.2, 4.1.6, 4.0.9, or 3.3.6 depending on the affected version.

What is the CWE ID for CVE-2013-7062?