VDB
CVE-2010-2491
CVE-2010-2491
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Roundup Cross-site Scripting (XSS) vulnerability
EPSS 2.55% · 84.9th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
2.55%
84.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| roundup-tracker | roundup | 1.1.2, 0.1.1, 0 |
| n/a | n/a | n/a |
| PyPI | roundup | 0 |
Timeline
- Sep 24, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- http://roundup.svn.sourceforge.net/viewvc/roundup/roundup/trunk/roundup/cgi/client.py?r1=4486&r2=4485&pathrev=4486 url
- http://roundup.svn.sourceforge.net/viewvc/roundup?view=revision&revision=4486 url
- FEDORA-2010-12269 vendor-advisory
- [oss-security] 20100702 CVE Request -- Roundup: XSS by processing PageTemplate template for a named page mailing-list
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048221.html technical
- http://secunia.com/advisories/41585 advisory
- http://sourceforge.net/mailarchive/message.php?msg_name=AANLkTimIYtyRzTAReGmTSCEqPYBvwkkxrP6YKrdVm_nU%40mail.gmail.com technical
- http://www.securityfocus.com/bid/41326 technical
- https://bugzilla.redhat.com/show_bug.cgi?id=610861 technical
- http://secunia.com/advisories/40433 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-2491 advisory
- https://github.com/roundup-tracker/roundup/commit/dcef024bae8f63d290454250767a377eb0e1647b url
- https://github.com/pypa/advisory-database/tree/main/vulns/roundup/PYSEC-2010-31.yaml url
- https://github.com/roundup-tracker/roundup package
- https://web.archive.org/web/20111225190151/http://secunia.com/advisories/41585 url
- https://web.archive.org/web/20140725071254/http://secunia.com/advisories/40433 url
- https://web.archive.org/web/20200228183400/http://www.securityfocus.com/bid/41326 url
- http://bugs.gentoo.org/show_bug.cgi?id=326395 url
- http://issues.roundup-tracker.org/issue2550654 url
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048061.html url
…and 1 more