CVE-2013-6395

2013-12-0518:55:12

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

68.2%

JSON

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php.

Affected configurations

Nvd

Node

gangliaganglia-webMatch3.5.8

gangliaganglia-webMatch3.5.10

VendorProductVersionCPE
gangliaganglia-web3.5.8cpe:2.3:a:ganglia:ganglia-web:3.5.8:*:*:*:*:*:*:*
gangliaganglia-web3.5.10cpe:2.3:a:ganglia:ganglia-web:3.5.10:*:*:*:*:*:*:*