CVE-2013-1823

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:subscription_asset_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:subscription_asset_manager:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:subscription_asset_manager:1.1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-04-02 22:55

Updated : 2024-02-04 18:16


NVD link : CVE-2013-1823

Mitre link : CVE-2013-1823

CVE.ORG link : CVE-2013-1823


JSON object : View

Products Affected

redhat

  • subscription_asset_manager
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')