CVE-2013-7071: XSS
Published Dec 31, 2019
·Updated
Cross-site scripting (XSS) vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO.
Affected Software
1 affected component
Fibranet Monitorix<3.4.0
Remediation
Event History
Dec 31, 2019
CVE Published
via MITRE·07:57 PM
Data Sourced
via MITRE·07:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-7071?
CVE-2013-7071 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-7071?
To fix CVE-2013-7071, update Monitorix to version 3.4.0 or later.
3
What type of vulnerability is CVE-2013-7071?
CVE-2013-7071 is a cross-site scripting (XSS) vulnerability.
4
What software version is affected by CVE-2013-7071?
Versions of Monitorix prior to 3.4.0 are affected by CVE-2013-7071.
5
Can CVE-2013-7071 be exploited remotely?
Yes, CVE-2013-7071 allows remote attackers to inject arbitrary web scripts or HTML.