NVD

Id
13942  
Name
CVE-2010-2477  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-11-05  
Modified Date
2010-12-10  
Seq
2010-2477  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77145 13942 CVE-2010-2477 http://bitbucket.org/ianb/paste/changeset/fcae59df8b56  View
77146 13942 CVE-2010-2477 http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1  View
77147 13942 CVE-2010-2477 [pylons-discuss] 20100624 Paste 1.7.4, security fix for XSS hole  View
77148 13942 CVE-2010-2477 [oss-security] 20100629 CVE request: XSS in python paste  View
77149 13942 CVE-2010-2477 [oss-security] 20100630 Re: CVE request: XSS in python paste  View
77150 13942 CVE-2010-2477 http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole  View
77151 13942 CVE-2010-2477 41160  View
77152 13942 CVE-2010-2477 USN-1026-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37168 JVNDB-2010-002953 Paste の paste.httpexceptions 実装におけるクロスサイトスクリプティングの脆弱性 Paste の paste.httpexceptions 実装 には、以下に関連する問題があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2477 45057 CVE-2010-2477 13942 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002953.html 2010-06-24 2012-03-27 View