Unscored CVE-2013-4430 EUVD-2013-4307GHSA-f86v-mq2r-9qvc

Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inj…

Published May 19, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php.

References

https://bugs.launchpad.net/mahara/+bug/1175446
[oss-security] 20131008 CVE request: mahara 1.7.3 mailing-list
https://mahara.org/interaction/forum/topic.php?id=5754
[oss-security] 20131015 Re: CVE request: mahara 1.7.3 mailing-list
[oss-security] 20131015 Re: Re: CVE request: mahara 1.7.3 mailing-list