CVE-2013-4109

MediumCVSS 6.1/10Last modified Jun 16, 2026

Description

An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Cryptocat	Message Handling	1.1.165

References

https://tobtu.com/decryptocat.phpVendor Advisory
https://vuldb.com/es/?id.9445Permissions Required, Third Party Advisory
https://www.openwall.com/lists/oss-security/2013/07/10/15Mailing List, Third Party Advisory
https://www.securityfocus.com/bid/61097Third Party Advisory, VDB Entry
https://tobtu.com/decryptocat.phpVendor Advisory
https://vuldb.com/es/?id.9445Permissions Required, Third Party Advisory
https://www.openwall.com/lists/oss-security/2013/07/10/15Mailing List, Third Party Advisory
https://www.securityfocus.com/bid/61097Third Party Advisory, VDB Entry

Timeline

Published: Nov 14, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-41105.3Cryptocat has an Unspecified Chat Participant User List Disclosure CVE-2013-41115.8The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the CVE-2013-41125.4The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive inform CVE-2013-41136.8ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (hea CVE-2013-41145.0The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which a CVE-2013-41157.5Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to CVE-2013-41163.3lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary fil CVE-2013-41174.3Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows rem CVE-2013-41187.5FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspeci CVE-2013-41197.5FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) b CVE-2013-41207.5Katello has a Denial of Service vulnerability in API OAuth authentication CVE-2013-41224.3Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as impleme