CVEvulnerability
CVE-2013-1823
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-04-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
Affected configurations
• redhat subscription asset manager (<= 1.2.0)
• redhat subscription asset manager 1.0.0
• redhat subscription asset manager 1.1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://rhn.redhat.com/errata/RHSA-2013-0686.html Vendor Advisory
- http://secunia.com/advisories/52774 Vendor Advisory
- http://www.osvdb.org/91718 www.osvdb.org
- https://bugzilla.redhat.com/show_bug.cgi?id=918784 Exploit
- http://rhn.redhat.com/errata/RHSA-2013-0686.html Vendor Advisory
- http://secunia.com/advisories/52774 Vendor Advisory
- http://www.osvdb.org/91718 www.osvdb.org
- https://bugzilla.redhat.com/show_bug.cgi?id=918784 Exploit