CVE-2013-2138

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers…

published October 10, 2013

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02707 · 85.8th percentile
Published
2013-10-10T00:00Z
EPSS history
Timeline
  • 10 OCT 00:00Z
    The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers…
    cvelistv5