CVE-2013-1289
published 2013-04-09CVE-2013-1289: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps…
PriorityP273medium4.3CVSS 2.0
AVNACMAuNCNIPAN
ITWVulnCheck KEV
Exploited in the wild
EPSS
15.43%
96.4th percentile
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | groove_server | — | — |
| microsoft | infopath | — | — |
| microsoft | office_web_apps | — | — |
| microsoft | sharepoint_foundation | — | — |
| microsoft | sharepoint_server | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerability is an XSS (elevation of privilege) triggered via a crafted HTML string passed through the HTML sanitization component; monitor for unsanitized script injection in SharePoint/Groove/Office Web Apps HTTP requests. ↗
- →Attack vector is a crafted string submitted to affected Microsoft products (SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, Office Web Apps 2010 SP1); inspect HTTP POST/GET parameters targeting these platforms for embedded script payloads. ↗
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vulncheck4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w6j3-38wv-jp2v: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office W
ghsa_unreviewed·2022-05-14
CVE-2013-1289 [MEDIUM] CWE-79 GHSA-w6j3-38wv-jp2v: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office W
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
VulnCheck
Microsoft groove_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
vulncheck·2013·CVSS 4.3
CVE-2013-1289 [MEDIUM] Microsoft groove_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Microsoft groove_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
Affected: Microsoft groove_server
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-035
No detection rules found.
No public exploits indexed.
http://www.us-cert.gov/ncas/alerts/TA13-100Ahttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-035https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16599http://www.us-cert.gov/ncas/alerts/TA13-100Ahttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-035https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16599
2013-04-09
Published
Exploited in the wild