Lucene search

RedhatCVE-2010-4823

HistorySep 17, 2012 - 5:55 p.m.

CVE-2010-4823

2012-09-1717:55:02

CWE-79

redhat

web.nvd.nist.gov

cve-2010-4823

cross-site scripting

xss

silverstripe

security vulnerability

nvd

cve

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via “missing URL actions.”

Affected configurations

Nvd

Node

silverstripesilverstripeMatch2.3.0

silverstripesilverstripeMatch2.3.1

silverstripesilverstripeMatch2.3.2

silverstripesilverstripeMatch2.3.3

silverstripesilverstripeMatch2.3.4

silverstripesilverstripeMatch2.3.5

silverstripesilverstripeMatch2.3.6

silverstripesilverstripeMatch2.3.7

silverstripesilverstripeMatch2.3.8

silverstripesilverstripeMatch2.3.9

Node

silverstripesilverstripeMatch2.4.0

silverstripesilverstripeMatch2.4.1

silverstripesilverstripeMatch2.4.2

silverstripesilverstripeMatch2.4.3

VendorProductVersionCPE
silverstripesilverstripe2.3.0cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*
silverstripesilverstripe2.3.1cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*
silverstripesilverstripe2.3.2cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*
silverstripesilverstripe2.3.3cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*
silverstripesilverstripe2.3.4cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*
silverstripesilverstripe2.3.5cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*
silverstripesilverstripe2.3.6cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*
silverstripesilverstripe2.3.7cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*
silverstripesilverstripe2.3.8cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*
silverstripesilverstripe2.3.9cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silverstripe	silverstripe	2.3.0	cpe:2.3:a:silverstripe:silverstripe:2.3.0:::::::*
silverstripe	silverstripe	2.3.1	cpe:2.3:a:silverstripe:silverstripe:2.3.1:::::::*
silverstripe	silverstripe	2.3.2	cpe:2.3:a:silverstripe:silverstripe:2.3.2:::::::*
silverstripe	silverstripe	2.3.3	cpe:2.3:a:silverstripe:silverstripe:2.3.3:::::::*
silverstripe	silverstripe	2.3.4	cpe:2.3:a:silverstripe:silverstripe:2.3.4:::::::*
silverstripe	silverstripe	2.3.5	cpe:2.3:a:silverstripe:silverstripe:2.3.5:::::::*
silverstripe	silverstripe	2.3.6	cpe:2.3:a:silverstripe:silverstripe:2.3.6:::::::*
silverstripe	silverstripe	2.3.7	cpe:2.3:a:silverstripe:silverstripe:2.3.7:::::::*
silverstripe	silverstripe	2.3.8	cpe:2.3:a:silverstripe:silverstripe:2.3.8:::::::*
silverstripe	silverstripe	2.3.9	cpe:2.3:a:silverstripe:silverstripe:2.3.9:::::::*

Rows per page:

1-10 of 141

References

doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4

open.silverstripe.org/changeset/114444

secunia.com/advisories/42346

www.openwall.com/lists/oss-security/2011/01/03/12

www.openwall.com/lists/oss-security/2012/04/30/1

www.openwall.com/lists/oss-security/2012/04/30/3

www.openwall.com/lists/oss-security/2012/05/01/3

www.osvdb.org/69886

www.securityfocus.com/bid/45367

exchange.xforce.ibmcloud.com/vulnerabilities/63988

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

Related for CVE-2010-4823