Home > Vulnerability Database > CVE-2013-5042

Mend Vulnerability Database

CVE-2013-5042

Good to know:

Date: December 10, 2013

Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS Vulnerability."

Language: C#

Severity Score

4.3

Related Resources (4)

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-5042

Url: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-103

Url: http://www.securitytracker.com/id/1029463

Url: https://www.mend.io/vulnerability-database/CVE-2013-5042

Severity Score

4.3

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

Upgrade Version

Upgrade to version 1.1.4,2.0.1

Learn More

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2013-5042

Good to know:

Date: December 10, 2013

Language: C#

Severity Score

Related Resources (4)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?