CVE-2013-4101

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-41029.1Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator WeaknessCVE-2013-41039.8Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user inputCVE-2013-41047.5Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire ProtocolCVE-2013-41057.5Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information DisclosureCVE-2013-41066.1A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.CVE-2013-41076.1Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scriptingCVE-2013-41089.8Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.CVE-2013-41096.1An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.CVE-2013-41105.3Cryptocat has an Unspecified Chat Participant User List DisclosureCVE-2013-41115.8The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the CVE-2013-41125.4The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive informCVE-2013-41136.8ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (hea
CVE-2013-4101: Medium severity, CVSS 5.3 | Vulnix