CVEvulnerability
CVE-2013-4171
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the search results in the (1) RSS and (2) Atom feed templates.
Affected configurations
• apache roller (<= 5.0.1)
• apache roller 4.0
• apache roller 4.0.1
• apache roller 5.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://rollerweblogger.org/project/entry/apache_roller_5_0_2 Patch
- http://secunia.com/advisories/55862 Vendor Advisory
- http://secunia.com/advisories/55877 Vendor Advisory
- http://rollerweblogger.org/project/entry/apache_roller_5_0_2 Patch
- http://secunia.com/advisories/55862 Vendor Advisory
- http://secunia.com/advisories/55877 Vendor Advisory