{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-11-15T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01.000Z", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"name": "1029588", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1029588"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html"}, {"name": "56405", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/56405"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304"}, {"name": "56295", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/56295"}, {"name": "DSA-2841", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2014/dsa-2841"}, {"name": "movabletype-richtexteditor-xss(90095)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90095"}, {"name": "[oss-security] 20140106 CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2014/q1/24"}, {"name": "[oss-security] 20140107 Re: CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2014/q1/36"}, {"name": "64657", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/64657"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2014-0977", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1029588", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1029588"}, {"name": "http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html", "refsource": "CONFIRM", "url": "http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html"}, {"name": "56405", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/56405"}, {"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304", "refsource": "CONFIRM", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304"}, {"name": "56295", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/56295"}, {"name": "DSA-2841", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2014/dsa-2841"}, {"name": "movabletype-richtexteditor-xss(90095)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90095"}, {"name": "[oss-security] 20140106 CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2014/q1/24"}, {"name": "[oss-security] 20140107 Re: CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2014/q1/36"}, {"name": "64657", "refsource": "BID", "url": "http://www.securityfocus.com/bid/64657"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T09:34:40.415Z"}, "title": "CVE Program Container", "references": [{"name": "1029588", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1029588"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html"}, {"name": "56405", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/56405"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304"}, {"name": "56295", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/56295"}, {"name": "DSA-2841", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2014/dsa-2841"}, {"name": "movabletype-richtexteditor-xss(90095)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90095"}, {"name": "[oss-security] 20140106 CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2014/q1/24"}, {"name": "[oss-security] 20140107 Re: CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2014/q1/36"}, {"name": "64657", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/64657"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2014-0977", "datePublished": "2014-01-10T17:00:00.000Z", "dateReserved": "2014-01-07T00:00:00.000Z", "dateUpdated": "2024-08-06T09:34:40.415Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sixapart:movabletype:5.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "77E0EB61-EE1A-4FA3-A644-81F0A551987D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.01:*:*:*:*:*:*:*", "matchCriteriaId": "12468D6E-01F2-4AE4-9E6A-F096FB12DF2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "F1515076-48EA-48A5-84C1-6EEFF9FB382A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.02:*:*:*:*:*:*:*", "matchCriteriaId": "9C783A30-16F4-42B1-A180-0E6E9988C365", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "2652FCAF-C342-46A0-8C8D-0B12966E0CC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "BA967824-9725-453F-8AB9-3A712DDF45D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "E27CBA54-1A5C-4F0C-B32F-05144543BF22", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "211DCA77-4DC5-436F-8150-EB988F96EBCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.03:*:*:*:*:*:*:*", "matchCriteriaId": "ACB4D3BC-5B51-4F04-8991-4CFADBCD52DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.04:*:*:*:*:*:*:*", "matchCriteriaId": "E6208AF3-A6A1-4D1B-A181-F40A44405173", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.11:*:*:*:*:*:*:*", "matchCriteriaId": "FF300F09-4F9C-4DCC-B843-97D3DF6AE1BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.12:*:*:*:*:*:*:*", "matchCriteriaId": "B3E93874-CAEE-44B4-91A5-225968D7AE21", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.13:*:*:*:*:*:*:*", "matchCriteriaId": "111E937F-8A54-45A5-A752-AA40D3888F60", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.14:*:*:*:*:*:*:*", "matchCriteriaId": "8A997B28-0E65-4A76-ACC6-38832B45F8BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.15:*:*:*:*:*:*:*", "matchCriteriaId": "354ECC47-7F50-4E40-922D-CB9BD5E1E1B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:5.031:*:*:*:*:*:*:*", "matchCriteriaId": "30E2D15B-83EB-47B8-9D41-B49C6430463A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movabletype:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "C49E8865-F9DA-4799-A8B8-E6532A7176E7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad cross-site scripting (XSS) en Rich Text Editor de Movable Type 5.0x, 5.1x anteriores a 5.161, 5.2. anteriores a 5.2.9 y 6.0.x anteriores a 6.0.1 permite a atacantes remotos inyectar script web o HTML a trav\u00e9s de vectores no especificados."}], "id": "CVE-2014-0977", "lastModified": "2026-04-29T01:13:23.040", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}]}, "published": "2014-01-10T17:55:03.113", "references": [{"source": "[email protected]", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html"}, {"source": "[email protected]", "url": "http://seclists.org/oss-sec/2014/q1/24"}, {"source": "[email protected]", "url": "http://seclists.org/oss-sec/2014/q1/36"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/56295"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/56405"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2014/dsa-2841"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/64657"}, {"source": "[email protected]", "url": "http://www.securitytracker.com/id/1029588"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90095"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2014/q1/24"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2014/q1/36"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/56295"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/56405"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2014/dsa-2841"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/64657"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1029588"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90095"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}

{}