CVE-2014-2353
HighSummary
Cross-site scripting (XSS) vulnerability in Cogent DataHub before version 7.3.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
Risk Assessment
Attackers can exploit this vulnerability to hijack user sessions or steal data, posing a serious security threat to the application.
Recommendation
It is recommended to update Cogent DataHub to version 7.3.5 or later to mitigate this vulnerability.
Other vulnerabilities in Cogent DataHub
See all- CVE-2016-2288High
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.
- CVE-2014-3789High
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
- CVE-2014-3788High
A heap-based buffer overflow in the Web Server in Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary code by sending a negative value in the Content-Length field in a request.
Original NVD description (English source)
Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.