CVE-2013-4103

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

Score

CVSS 3.1 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2019-11-04

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Cryptocat (Cryptocat Project)

References

• http://packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html
• https://packetstormsecurity.com/files/cve/CVE-2013-4103
• https://tobtu.com/decryptocat.php
• https://www.openwall.com/lists/oss-security/2013/07/10/15
• https://www.securityfocus.com/bid/61093