CVE-2013-2187

Currently unrated

Key Information:

Vendor
Apache
Status
Archiva
Vendor
CVE Published:
22 April 2014

Summary

Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.

References

http://www.securityfocus.com/bid/66991
vdb-entryx_refsource_BID
http://archiva.apache.org/security.html
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/531884/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.