Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
References
Link | Resource |
---|---|
http://rhn.redhat.com/errata/RHSA-2013-0686.html | Vendor Advisory |
http://secunia.com/advisories/52774 | Vendor Advisory |
http://www.osvdb.org/91718 | |
https://bugzilla.redhat.com/show_bug.cgi?id=918784 | Exploit |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-04-02T22:00:00Z
Updated: 2013-04-02T22:00:00Z
Reserved: 2013-02-19T00:00:00Z
Link: CVE-2013-1823
JSON object: View
NVD Information
Status : Modified
Published: 2013-04-02T22:55:03.320
Modified: 2023-02-13T04:41:37.447
Link: CVE-2013-1823
JSON object: View
Redhat Information
No data.
CWE