Unrated severityNVD Advisory· Published Dec 11, 2019· Updated Aug 6, 2024

CVE-2013-4968

Description

Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management."

Affected products

Puppet/Enterprisedescription
Puppet (software)/Puppet Enterprisellm-fuzzy
Range: <3.0.1

Patches

Vulnerability mechanics

References

puppetlabs.com/security/cve/cve-2013-4968mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000