Back to Database
Status published
Medium
CVE-2013-6395
Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6395
Credits & Attribution
No credits recorded in the NVD database.
References
- http://seclists.org/oss-sec/2013/q4/346
- https://github.com/ganglia/ganglia-web/issues/218
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89272
- http://secunia.com/advisories/55854
- http://www.rusty-ice.de/advisory/advisory_2013002.txt
- http://osvdb.org/100380
More from ganglia
View All →CVE-2019-20379
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via...
Medium
6.1
CVE-2019-20378
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via...
Medium
6.1
CVE-2013-1770
Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7...
Medium
4.3
CVE-2013-0275
Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6...
Medium
4.3
CVE-2012-3448
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers...
High
7.5
Affected Vendor
ganglia
View all reports →Affected Software
ganglia-web
Vulnerable Versions:
3.5.8, 3.5.10
Timeline
Official Publish:
December 5th, 2013
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.