CVE-2013-4608

MEDIUM 4.3CVE-2013-4608 · Published 17/06/2013 · updated 16/06/2026

In short

CVE-2013-4608 is a MEDIUM (CVSS 4.3) vulnerability affecting redcap (project-redcap), redcap (vanderbilt).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
redcap project-redcap	`= 4.13.18= 4.14.5= 4.14.6= 4.15.0= 4.15.1= 4.15.2= 4.15.3= 4.15.4= 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4`	No fix yet
redcap vanderbilt	`= 4.14.0= 4.14.1= 4.14.2= 4.14.3= 4.14.4≤ 5.0.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.

References

ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

More vulnerabilities in redcap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

redcap

project-redcap

= 4.13.18= 4.14.5= 4.14.6= 4.15.0= 4.15.1= 4.15.2= 4.15.3= 4.15.4= 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4

No fix yet

redcap

vanderbilt

= 4.14.0= 4.14.1= 4.14.2= 4.14.3= 4.14.4≤ 5.0.5

No fix yet

More vulnerabilities in redcap

See all →