A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
References
Link | Resource |
---|---|
https://www.securityfocus.com/bid/61099 | Third Party Advisory VDB Entry |
https://www.openwall.com/lists/oss-security/2013/07/10/15 | Mailing List Third Party Advisory |
https://tobtu.com/decryptocat.php | Vendor Advisory |
https://vuldb.com/pl/?id.9433 | Permissions Required Third Party Advisory |
Configurations
Information
Published : 2019-11-14 12:15
Updated : 2019-11-18 10:19
NVD link : CVE-2013-4106
Mitre link : CVE-2013-4106
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
cryptocat_project
- cryptocat