CVE-2013-4968

Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management."

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-12-11

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Puppet Enterprise (Puppet)

References

• http://puppetlabs.com/security/cve/cve-2013-4968