CVE-2013-4204
Summary
| CVE | CVE-2013-4204 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-11-18 02:55:07 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Web Toolkit | 1.4.60 | All | All | All | |
| Application | Web Toolkit | 1.5.0 | rc | All | All | |
| Application | Web Toolkit | 1.5.1 | rc2 | All | All | |
| Application | Web Toolkit | 1.5.2 | All | All | All | |
| Application | Web Toolkit | 1.5.3 | All | All | All | |
| Application | Web Toolkit | 1.6.2 | rc | All | All | |
| Application | Web Toolkit | 1.6.3 | rc2 | All | All | |
| Application | Web Toolkit | 1.6.4 | All | All | All | |
| Application | Web Toolkit | 1.7.0 | All | All | All | |
| Application | Web Toolkit | 1.7.1 | All | All | All | |
| Application | Web Toolkit | 2.0.0 | All | All | All | |
| Application | Web Toolkit | 2.0.0 | rc1 | All | All | |
| Application | Web Toolkit | 2.0.1 | All | All | All | |
| Application | Web Toolkit | 2.0.2 | All | All | All | |
| Application | Web Toolkit | 2.0.3 | All | All | All | |
| Application | Web Toolkit | 2.0.4 | All | All | All | |
| Application | Web Toolkit | 2.1.0 | m1 | All | All | |
| Application | Web Toolkit | 2.1.0 | m2 | All | All | |
| Application | Web Toolkit | 2.1.0 | m3 | All | All | |
| Application | Web Toolkit | 2.1.0 | rc1 | All | All | |
| Application | Web Toolkit | 2.1.1 | All | All | All | |
| Application | Web Toolkit | 2.2.0 | All | All | All | |
| Application | Web Toolkit | 2.3.0 | All | All | All | |
| Application | Web Toolkit | 2.3.0 | m1 | All | All | |
| Application | Web Toolkit | 2.4 | beta | All | All | |
| Application | Web Toolkit | 2.4.0 | All | All | All | |
| Application | Web Toolkit | 2.4.5 | All | All | All | |
| Application | Web Toolkit | 2.5.0 | rc1 | All | All | |
| Application | Web Toolkit | 2.5.0 | rc2 | All | All | |
| Application | Web Toolkit | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - CVE request: XSS in Google Web Toolkit (GWT) | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Patch |
| oss-security - Re: CVE request: XSS in Google Web Toolkit (GWT) | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Patch |
| GWT Project | af854a3a-2127-422b-91ae-364da2661108 | www.gwtproject.org | |
| Google Web Toolkit CVE-2013-4204 Multiple Cross Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE-2013-4204 - Red Hat Customer Portal | MITRE | access.redhat.com | |
| 992911 – (CVE-2013-4204) CVE-2013-4204 GWT: reflected XSS in HTML files used by GWTTestCase | MITRE | bugzilla.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.