Lucene search

[email protected]CVE-2009-0736

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-0736

2022-10-0316:24:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-0736

cross-site scripting

xss

pebble

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Cross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

simon_brownpebbleRange≤2.3.1

simon_brownpebbleMatch1.0

simon_brownpebbleMatch1.1

simon_brownpebbleMatch1.2

simon_brownpebbleMatch1.3

simon_brownpebbleMatch1.4

simon_brownpebbleMatch1.4beta1

simon_brownpebbleMatch1.4beta2

simon_brownpebbleMatch1.4beta3

simon_brownpebbleMatch1.4.1

simon_brownpebbleMatch1.4.1_01

simon_brownpebbleMatch1.4.2

simon_brownpebbleMatch1.4.2_01

simon_brownpebbleMatch1.5

simon_brownpebbleMatch1.5beta1

simon_brownpebbleMatch1.5beta2

simon_brownpebbleMatch1.5beta3

simon_brownpebbleMatch1.5.1

simon_brownpebbleMatch1.6

simon_brownpebbleMatch1.6beta1

simon_brownpebbleMatch1.6beta2

simon_brownpebbleMatch1.6beta3

simon_brownpebbleMatch1.6.1

simon_brownpebbleMatch1.7

simon_brownpebbleMatch1.7beta1

simon_brownpebbleMatch1.7.1

simon_brownpebbleMatch1.7.2

simon_brownpebbleMatch1.8

simon_brownpebbleMatch1.9

simon_brownpebbleMatch2.0

simon_brownpebbleMatch2.0.0m1

simon_brownpebbleMatch2.0.0m2

simon_brownpebbleMatch2.0.0m3

simon_brownpebbleMatch2.0.0rc1

simon_brownpebbleMatch2.0.0rc2

simon_brownpebbleMatch2.0.1

simon_brownpebbleMatch2.1

simon_brownpebbleMatch2.1rc1

simon_brownpebbleMatch2.2

simon_brownpebbleMatch2.3

CPENameOperatorVersion
simon_brown:pebblesimon brown pebblele2.3.1
simon_brown:pebblesimon brown pebbleeq1.0
simon_brown:pebblesimon brown pebbleeq1.1
simon_brown:pebblesimon brown pebbleeq1.2
simon_brown:pebblesimon brown pebbleeq1.3
simon_brown:pebblesimon brown pebbleeq1.4
simon_brown:pebblesimon brown pebbleeq1.4.1
simon_brown:pebblesimon brown pebbleeq1.4.1_01
simon_brown:pebblesimon brown pebbleeq1.4.2
simon_brown:pebblesimon brown pebbleeq1.4.2_01

CPE	Name	Operator	Version
simon_brown:pebble	simon brown pebble	le	2.3.1
simon_brown:pebble	simon brown pebble	eq	1.0
simon_brown:pebble	simon brown pebble	eq	1.1
simon_brown:pebble	simon brown pebble	eq	1.2
simon_brown:pebble	simon brown pebble	eq	1.3
simon_brown:pebble	simon brown pebble	eq	1.4
simon_brown:pebble	simon brown pebble	eq	1.4.1
simon_brown:pebble	simon brown pebble	eq	1.4.1_01
simon_brown:pebble	simon brown pebble	eq	1.4.2
simon_brown:pebble	simon brown pebble	eq	1.4.2_01

Rows per page:

1-10 of 251

References

secunia.com/advisories/33888

sourceforge.net/forum/forum.php?forum_id=917656

sourceforge.net/project/shownotes.php?release_id=660130

www.securityfocus.com/bid/33733

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Related for CVE-2009-0736

nvd1 prion1 cvelist1