Beveiligingsadvies

CVE-2013-2138

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-10-10 00:00:00
Laatst bijgewerkt 2024-09-16 18:56:18
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.