CVE-2013-6882: Cru-Inc Ditto Forensic Fieldstation

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web script or HTML via the username parameter in a login or (2) remote authenticated users to inject arbitrary web script or HTML via unspecified form fields.

Affected products

• Cru-Inc Ditto Forensic Fieldstation
• Cru-Inc Ditto Forensic Fieldstation Firmware: up to and including 2013oct15a

Published 2013-12-17. Last modified 2026-06-17.