Vulners
Lucene search
Good For Enterprise 2.2.2.1611 Cross Site Scripting
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Good for Enterprise 2.2.2.1611 - XSS Vulnerability | 25 Sep 201300:00 | – | zdt |
 | CVE-2013-5118 | 25 Sep 201310:00 | – | cve |
 | CVE-2013-5118 | 25 Sep 201310:00 | – | cvelist |
 | Good for Enterprise 2.2.2.1611 - Cross-Site Scripting | 25 Sep 201300:00 | – | exploitdb |
 | EUVD-2013-4959 | 7 Oct 202500:30 | – | euvd |
 | Good for Enterprise 2.2.2.1611 - Cross-Site Scripting | 25 Sep 201300:00 | – | exploitpack |
 | CVE-2013-5118 | 25 Sep 201310:31 | – | nvd |
 | Cross site scripting | 25 Sep 201310:31 | – | prion |
 | CVE-2013-5118 | 22 May 202506:11 | – | redhatcve |
 | CVE-2013-5118 - XSS Good for Enterprise iOS | 1 Oct 201300:00 | – | securityvulns |
10
`Hello,
Last month I identified a XSS vulnerability in the Good for Enterprise iOS application.
The vulnerable versions are v2.2.2.1611 and earlier
Proof of Concept:
HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable version.
Payload:
<body>
<div>
<script>alert('XSS Here')</script>
</div>
</body>
Remediation:
I worked with the Good people to close the issue, I provided some guidance and feedback and agreed with them to not disclose it until they fix it.
The new release is now available:
Update the "Good for Enterprise" iOS application to 2.2.4.1659 or newer
References:
https://www.roblest.com/#research:CVE-2013-5118
Can the comunity please provide feedback and comments in order to ensure the fix is working well
Many thanks
Mario
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Sep 2013 00:00Current
6.6Medium risk
Vulners AI Score6.6
EPSS0.00406