CVE-2013-6870

https://notcve.org/view.php?id=CVE-2013-6870

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en Splunk Web de Splunk anterior a la versión 5.0.6 permite a atacantes remotos inyectar script web o HTML arbitrario a través de vectores sin especificar. • http://secunia.com/advisories/55774 http://www.securitytracker.com/id/1029385 http://www.splunk.com/view/SP-CAAAJCD • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •