← Vulnerability feed

Vulnerability record · CVE-2013-4103 · published 4 November 2019

CVE-2013-4103: Cryptocat project cryptocat improper input validation vulnerability

Cryptocat Project · Cryptocat

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

9.8 CVSS 3.1 Critical EPSS 6.9% · top 6.2% CWE-20 · Improper input validation
9.8CVSS 3.1 base score, v2 7.5
6.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html Third Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-4103 Third Party AdvisoryVDB Entry
https://tobtu.com/decryptocat.php Product
https://www.openwall.com/lists/oss-security/2013/07/10/15 Mailing ListThird Party Advisory
https://www.securityfocus.com/bid/61093 Third Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html Third Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-4103 Third Party AdvisoryVDB Entry
https://tobtu.com/decryptocat.php Product
https://www.openwall.com/lists/oss-security/2013/07/10/15 Mailing ListThird Party Advisory
https://www.securityfocus.com/bid/61093 Third Party AdvisoryVDB Entry

Track CVE-2013-4103 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2013-4108Cryptocat project cryptocat vulnerabilityMultiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.EPSS 1.5%9.8CVE-2013-2259Cryptocat project cryptocat improper input validation vulnerabilityCryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation OverviewEPSS 3.7%9.8CVE-2013-2260Cryptocat project cryptocat vulnerabilityCryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy WeaknessEPSS 2.2%9.1CVE-2013-4102Cryptocat project cryptocat vulnerabilityCryptocat before 2.0.22 strophe.js Math.random() Random Number Generator WeaknessEPSS 2.0%7.5CVE-2013-4105Cryptocat project cryptocat information exposure vulnerabilityCryptocat before 2.0.22 has Multiparty Encryption Scheme Information DisclosureEPSS 1.1%7.5CVE-2013-2257Cryptocat project cryptocat improper restriction of authentication attempts vulnerabilityCryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force WeaknessEPSS 2.0%7.5CVE-2013-2261Cryptocat project cryptocat information exposure vulnerabilityCryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information DisclosureEPSS 12%7.5CVE-2013-2262Cryptocat project cryptocat information exposure vulnerabilityCryptocat strophe.js before 2.0.22 has information disclosureEPSS 1.9%

Source: NIST National Vulnerability Database (record CVE-2013-4103), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.