Описание
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| feedparser | fixed | 5.0.1-1 | package | |
| feedparser | no-dsa | squeeze | package | |
| feedparser | no-dsa | lenny | package | |
| planet-venus | fixed | 0~git9de2109-2 | package | |
| planet-venus | no-dsa | wheezy | package | |
| planet-venus | no-dsa | squeeze | package | |
| planet-venus | no-dsa | lenny | package |
Примечания
http://web.archive.org/web/20120211010803/https://code.google.com/p/feedparser/issues/detail?id=254
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.
