admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 17:21:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2010/CVE-2010-48xx/CVE-2010-4823.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

255 lines
8.1 KiB
JSON
Raw Blame History

{
"id": "CVE-2010-4823",
"sourceIdentifier": "secalert@redhat.com",
"published": "2012-09-17T17:55:02.517",
"lastModified": "2024-11-21T01:21:51.267",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via \"missing URL actions.\""
},
{
"lang": "es",
"value": "Una vulnerabilidad de ejecuci\u00f3n de comandos en sitios cruzados (XSS) en el m\u00e9todo httpError en spphire/core/control/RequestHandler.php en SilverStripe v2.3.x antes de v2.3.10 y v2.4.x antes de v2.4.4, cuando el control de errores personalizado no se utiliza, permite inyectar secuencias de comandos web o HTML a atacantes remotos a trav\u00e9s de \"acciones con URL que faltan\".\r\n"
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"baseScore": 4.3,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "24734325-97DA-4B2C-B192-3F4B83CCF0C0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "609BEA7D-81F2-4DFE-AB2A-157A6B7DE348"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7856E216-D7B7-48A5-9D20-9F1973DA005D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "DF4FF5F5-6565-4EA1-8099-2C4C964DA006"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7E0AD691-1BA2-4D8B-935C-B2C7A31BD5ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "2AD30632-B31E-4425-827E-205351ABECE6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "706247B5-ACA3-4863-BDBC-B42EA95E1476"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "87690027-1CF7-477E-91FE-87E6F77B2988"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*",
"matchCriteriaId": "9731FCBA-AA01-4510-87B1-E547AD28D09D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*",
"matchCriteriaId": "0EE10366-8242-49B1-9F4F-E79304424A27"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F5BCB4DE-0432-4378-8A31-81208794EBD7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DE198516-3D97-4804-84CF-8F9AAC60E795"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "534AD362-1460-4784-97C8-3AA5DD830F94"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silverstripe:silverstripe:2.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "FA54E0DE-33DC-445D-8154-4DC580BA8812"
}
]
}
]
}
],
"references": [
{
"url": "http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4",
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
]
},
{
"url": "http://open.silverstripe.org/changeset/114444",
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Patch"
]
},
{
"url": "http://secunia.com/advisories/42346",
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2011/01/03/12",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/04/30/1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/04/30/3",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/05/01/3",
"source": "secalert@redhat.com"
},
{
"url": "http://www.osvdb.org/69886",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/45367",
"source": "secalert@redhat.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63988",
"source": "secalert@redhat.com"
},
{
"url": "http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
]
},
{
"url": "http://open.silverstripe.org/changeset/114444",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Patch"
]
},
{
"url": "http://secunia.com/advisories/42346",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2011/01/03/12",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/04/30/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/04/30/3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/05/01/3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/69886",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/45367",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63988",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}
Reference in New Issue View Git Blame Copy Permalink