Unscored CVE-2013-2137 EUVD-2013-2102GHSA-x8qj-3m3j-c84j

Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBi…

Published Aug 15, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

apache-ofbiz-cve20132137-xss(85874) vdb-entry
http://ofbiz.apache.org/download.html#vulnerabilities
53910 third-party-advisory
61370 vdb-entry
20130720 [CVE-2013-2137] Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application mailing-list
95523 vdb-entry