Vulners
Lucene search
Good for Enterprise 2.2.2.1611 - XSS Vulnerability
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Good for Enterprise 2.2.2.1611 - XSS Vulnerability | 25 Sep 201300:00 | – | zdt |
 | CVE-2013-5118 | 25 Sep 201310:00 | – | cve |
 | CVE-2013-5118 | 25 Sep 201310:00 | – | cvelist |
 | Good for Enterprise 2.2.2.1611 - Cross-Site Scripting | 25 Sep 201300:00 | – | exploitdb |
 | EUVD-2013-4959 | 7 Oct 202500:30 | – | euvd |
 | Good for Enterprise 2.2.2.1611 - Cross-Site Scripting | 25 Sep 201300:00 | – | exploitpack |
 | CVE-2013-5118 | 25 Sep 201310:31 | – | nvd |
 | Good For Enterprise 2.2.2.1611 Cross Site Scripting | 24 Sep 201300:00 | – | packetstorm |
 | Cross site scripting | 25 Sep 201310:31 | – | prion |
 | CVE-2013-5118 | 22 May 202506:11 | – | redhatcve |
10
The vulnerable versions are v2.2.2.1611 and earlier
Proof of Concept:
HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable version.
Payload:
<body>
<div>
<script>alert('XSS Here')</script>
</div>
</body>
Remediation:
I worked with the Good people to close the issue, I provided some guidance and feedback and agreed with them to not disclose it until they fix it.
The new release is now available:
Update the "Good for Enterprise" iOS application to 2.2.4.1659 or newer
References:
https://www.roblest.com/#research:CVE-2013-5118
Can the comunity please provide feedback and comments in order to ensure the fix is working well
Many thanks
Mario
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2014 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.00406