Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2013-2138
Deferred
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-10 Oct, 2013 | 00:55
Updated At-11 Apr, 2025 | 00:51

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.5HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
CPE Matches
menalto
menalto
>>gallery>>Versions up to 3.0.7(inclusive)
cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0
cpe:2.3:a:menalto:gallery:3.0:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0
cpe:2.3:a:menalto:gallery:3.0:beta1:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0
cpe:2.3:a:menalto:gallery:3.0:beta2:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0
cpe:2.3:a:menalto:gallery:3.0:beta3:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0
cpe:2.3:a:menalto:gallery:3.0:rc1:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0
cpe:2.3:a:menalto:gallery:3.0:rc2:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0.1
cpe:2.3:a:menalto:gallery:3.0.1:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0.2
cpe:2.3:a:menalto:gallery:3.0.2:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0.3
cpe:2.3:a:menalto:gallery:3.0.3:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0.4
cpe:2.3:a:menalto:gallery:3.0.4:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0.5
cpe:2.3:a:menalto:gallery:3.0.5:*:*:*:*:*:*:*
menalto
menalto
>>gallery>>3.0.6
cpe:2.3:a:menalto:gallery:3.0.6:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-20Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://galleryproject.org/gallery_3_0_8secalert@redhat.com
Vendor Advisory
http://sourceforge.net/apps/trac/gallery/ticket/2068secalert@redhat.com
N/A
http://sourceforge.net/apps/trac/gallery/ticket/2070secalert@redhat.com
N/A
http://www.openwall.com/lists/oss-security/2013/06/04/9secalert@redhat.com
N/A
https://bugzilla.redhat.com/show_bug.cgi?id=970596secalert@redhat.com
N/A
https://github.com/gallery/gallery3/commit/3e5bba2cd4febe8331c0158c11ea418f21c72efasecalert@redhat.com
N/A
https://github.com/gallery/gallery3/commit/80bb0f2222dd99ed2ce59e804b833bab63cc376asecalert@redhat.com
N/A
http://galleryproject.org/gallery_3_0_8af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://sourceforge.net/apps/trac/gallery/ticket/2068af854a3a-2127-422b-91ae-364da2661108
N/A
http://sourceforge.net/apps/trac/gallery/ticket/2070af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.openwall.com/lists/oss-security/2013/06/04/9af854a3a-2127-422b-91ae-364da2661108
N/A
https://bugzilla.redhat.com/show_bug.cgi?id=970596af854a3a-2127-422b-91ae-364da2661108
N/A
https://github.com/gallery/gallery3/commit/3e5bba2cd4febe8331c0158c11ea418f21c72efaaf854a3a-2127-422b-91ae-364da2661108
N/A
https://github.com/gallery/gallery3/commit/80bb0f2222dd99ed2ce59e804b833bab63cc376aaf854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found