Lucene search
PRIOn knowledge basePRION:CVE-2013-6430HistoryJan 10, 2020 - 2:15 p.m.
Cross site scripting
2020-01-1014:15:00
PRIOn knowledge base
www.prio-n.com
3
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a (1) line separator or (2) paragraph separator Unicode character or (3) left or (4) right angle bracket.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring_framework | ge | 3.0.0 | |
| spring_framework | lt | 3.2.2 |
Related
github
github
nvd
nvd
CVE-2013-6430
2020-01-10 14:15:10
ubuntucve
ubuntucve
CVE-2013-6430
2020-01-10 00:00:00
cve
cve
CVE-2013-6430
2020-01-10 14:15:10
osv
osv
debiancve
debiancve
CVE-2013-6430
2020-01-10 14:15:10
cvelist
cvelist
CVE-2013-6430
2020-01-10 13:28:11
debian
debian
[SECURITY] [DSA 2857-1] libspring-java security update
2014-02-08 14:41:58
mageia
mageia
Updated springframework package fixes security vulnerabilities
2014-02-26 01:35:01
nessus
nessus
Debian DSA-2857-1 : libspring-java - several vulnerabilities
2014-02-10 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2857-1)
2014-02-07 00:00:00
Mageia: Security Advisory (MGASA-2014-0096)
2022-01-28 00:00:00
securityvulns
securityvulns
redhat
redhat
(RHSA-2014:0401) Moderate: Red Hat JBoss A-MQ 6.1.0 update
2014-04-14 13:36:41
(RHSA-2014:0400) Moderate: Red Hat JBoss Fuse 6.1.0 update
2014-04-14 00:00:00
