Описание
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 4.2.0+dfsg1-1 |
| hardy | DNE | |
| karmic | ignored | end of life |
| lucid | ignored | end of life |
| maverick | not-affected | 4.1.1+dfsg1-1 |
| natty | not-affected | 4.2.0+dfsg1-1 |
| oneiric | not-affected | 4.2.0+dfsg1-1 |
| precise | not-affected | 4.2.0+dfsg1-1 |
| quantal | not-affected | 4.2.0+dfsg1-1 |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier b ...
EPSS
4.3 Medium
CVSS2