CVE-2013-1885

Redhat Certificate System - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.

References (6)

[Third Party Advisory, VDB Entry] http://osvdb.org/93626

[Third Party Advisory, VDB Entry] http://osvdb.org/93627

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0856.html

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1029685

[Vendor Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=923039

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/84477

Scores

EPSS 0.0024

EPSS Percentile 46.6%

Details

CWE

CWE-79

Status published

Products (4)

redhat/certificate_system

redhat/dogtag_certificate_system

redhat/dogtag_certificate_system

n/a/n/a

Published Jan 24, 2014

Tracked Since Feb 18, 2026