CVE-2009-5065

2011-04-1118:55:01

CWE-79

redhat

web.nvd.nist.gov

xss

vulnerability

universal feed parser

cve-2009-5065

feedparser.py

python

html

web script

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.011

Percentile

84.7%

JSON

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

Affected configurations

Nvd

Node

mark_pilgrimfeedparserRange≤4.1

mark_pilgrimfeedparserMatch3.0

mark_pilgrimfeedparserMatch3.0.1

mark_pilgrimfeedparserMatch3.1

mark_pilgrimfeedparserMatch3.2

mark_pilgrimfeedparserMatch3.3

mark_pilgrimfeedparserMatch4.0

mark_pilgrimfeedparserMatch4.0.1

mark_pilgrimfeedparserMatch4.0.2

VendorProductVersionCPE
mark_pilgrimfeedparser*cpe:2.3:a:mark_pilgrim:feedparser:*:*:*:*:*:*:*:*
mark_pilgrimfeedparser3.0cpe:2.3:a:mark_pilgrim:feedparser:3.0:*:*:*:*:*:*:*
mark_pilgrimfeedparser3.0.1cpe:2.3:a:mark_pilgrim:feedparser:3.0.1:*:*:*:*:*:*:*
mark_pilgrimfeedparser3.1cpe:2.3:a:mark_pilgrim:feedparser:3.1:*:*:*:*:*:*:*
mark_pilgrimfeedparser3.2cpe:2.3:a:mark_pilgrim:feedparser:3.2:*:*:*:*:*:*:*
mark_pilgrimfeedparser3.3cpe:2.3:a:mark_pilgrim:feedparser:3.3:*:*:*:*:*:*:*
mark_pilgrimfeedparser4.0cpe:2.3:a:mark_pilgrim:feedparser:4.0:*:*:*:*:*:*:*
mark_pilgrimfeedparser4.0.1cpe:2.3:a:mark_pilgrim:feedparser:4.0.1:*:*:*:*:*:*:*
mark_pilgrimfeedparser4.0.2cpe:2.3:a:mark_pilgrim:feedparser:4.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mark_pilgrim	feedparser	*	cpe:2.3:a:mark_pilgrim:feedparser::::::::
mark_pilgrim	feedparser	3.0	cpe:2.3:a:mark_pilgrim:feedparser:3.0:::::::*
mark_pilgrim	feedparser	3.0.1	cpe:2.3:a:mark_pilgrim:feedparser:3.0.1:::::::*
mark_pilgrim	feedparser	3.1	cpe:2.3:a:mark_pilgrim:feedparser:3.1:::::::*
mark_pilgrim	feedparser	3.2	cpe:2.3:a:mark_pilgrim:feedparser:3.2:::::::*
mark_pilgrim	feedparser	3.3	cpe:2.3:a:mark_pilgrim:feedparser:3.3:::::::*
mark_pilgrim	feedparser	4.0	cpe:2.3:a:mark_pilgrim:feedparser:4.0:::::::*
mark_pilgrim	feedparser	4.0.1	cpe:2.3:a:mark_pilgrim:feedparser:4.0.1:::::::*
mark_pilgrim	feedparser	4.0.2	cpe:2.3:a:mark_pilgrim:feedparser:4.0.2:::::::*