PT-2013-4895 · Google · Google Web Toolkit

David Jorm

·

CVE-2013-4204

·

Published

2013-11-15

·

Updated

2023-02-13

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Google Web Toolkit versions prior to 2.5.1 RC1
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the JUnit files within the GWTTestCase of Google Web Toolkit. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Recommendations For versions prior to 2.5.1 RC1, update to version 2.5.1 RC1 or later to resolve the issue.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-4204
GHSA-X24Q-XWRF-66JM

Affected Products

Google Web Toolkit