Описание
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.
Ссылки
- Vendor Advisory
- Patch
- Vendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:yahoo:yui:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.8.1:pr1:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.8.2:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.9.0:*:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.9.0:pr2:*:*:*:*:*:*
cpe:2.3:a:yahoo:yui:2.9.0:pr4:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00256
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
ubuntu
около 13 лет назад
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.
debian
около 13 лет назад
Cross-site scripting (XSS) vulnerability in the Flash component infras ...
EPSS
Процентиль: 49%
0.00256
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79