Описание
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| feedparser | fixed | 5.0.1-1 | package | |
| feedparser | no-dsa | squeeze | package | |
| feedparser | no-dsa | lenny | package | |
| planet-venus | fixed | 0~git9de2109-2 | package | |
| planet-venus | no-dsa | wheezy | package | |
| planet-venus | no-dsa | squeeze | package | |
| planet-venus | no-dsa | lenny | package |
Примечания
http://web.archive.org/web/20120304003020/https://code.google.com/p/feedparser/issues/detail?id=255
EPSS
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
EPSS