mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
77 lines
2.5 KiB
JSON
77 lines
2.5 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2013-2637",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html",
|
|
"refsource": "MISC",
|
|
"name": "http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/58930",
|
|
"refsource": "MISC",
|
|
"name": "http://www.securityfocus.com/bid/58930"
|
|
},
|
|
{
|
|
"url": "http://www.exploit-db.com/exploits/24922",
|
|
"refsource": "MISC",
|
|
"name": "http://www.exploit-db.com/exploits/24922"
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83288",
|
|
"refsource": "MISC",
|
|
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83288"
|
|
}
|
|
]
|
|
}
|
|
} |