CVE-2013-1743

2013-10-2400:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

51.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in
Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1
allow remote attackers to inject arbitrary web script or HTML via a field
value that is not properly handled during construction of a tabular report,
as demonstrated by the (1) summary or (2) real name field. NOTE: this
issue exists because of an incomplete fix for CVE-2012-4189.