CVEvulnerability
CVE-2013-4414
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form.
Affected configurations
• redhat enterprise mrg 2.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=998606 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1851.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1852.html rhn.redhat.com
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=998606 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1851.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1852.html rhn.redhat.com