Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS14MjRxLXh3cmYtNjZqbc4AAab3
Improper Neutralization of Input During Web Page Generation in Google Web Toolkit
Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Permalink: https://github.com/advisories/GHSA-x24q-xwrf-66jmJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14MjRxLXh3cmYtNjZqbc4AAab3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: over 1 year ago
Identifiers: GHSA-x24q-xwrf-66jm, CVE-2013-4204
References:
- https://nvd.nist.gov/vuln/detail/CVE-2013-4204
- http://www.gwtproject.org/release-notes.html#Release_Notes_2_5_1_RC1
- http://www.openwall.com/lists/oss-security/2013/08/05/1
- http://www.openwall.com/lists/oss-security/2013/08/05/3
- http://www.securityfocus.com/bid/61590
- https://access.redhat.com/security/cve/CVE-2013-4204
- https://bugzilla.redhat.com/show_bug.cgi?id=992911
- https://github.com/advisories/GHSA-x24q-xwrf-66jm
Affected Packages
maven:com.google.gwt:gwt
Dependent packages: 85Dependent repositories: 588
Downloads:
Affected Version Ranges: < 2.5.1
Fixed in: 2.5.1
All affected versions: 2.1.0, 2.1.1, 2.2.0, 2.3.0, 2.4.0, 2.5.0
All unaffected versions: 2.5.1, 2.6.0, 2.6.1, 2.7.0, 2.8.0, 2.8.1, 2.8.2, 2.9.0, 2.10.0