CVE-2010-2480
Published Jul 2, 2010
Last updated 2 years ago
Overview
- Description
- Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:makotemplates:mako:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99BA2C41-E26E-402F-881A-364E08D54D9D",
"versionEndIncluding": "0.3.3"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02668582-3F00-4950-A6B7-0300E1E6FEE3"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF3AC048-0E2C-4F1B-8CB0-9A9B0BBC613A"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DE88A4A-9326-4121-8F51-7FDAFADA3601"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14F4C349-0F78-47CC-84FB-E7B22212F3B2"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF4F91E1-3361-4051-AF32-977A008BFE0A"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D07E6D43-7F35-40FE-ABBC-1A99D7B2B021"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C53A02BD-C2EB-49DB-B8F3-A6264A076FC3"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E20E974-04BC-423A-8FB8-FC33E50F8E2C"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87453A9D-2B42-4434-8240-809F4993A85C"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ED07982-90DB-44CB-931C-79068B204052"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7622EA4F-8320-493B-832C-C567BBA705A4"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DF52184-D881-489B-8ABE-D61F40154E7D"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BFDED68-3CD4-4708-B2CA-AED5B1DF769F"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BD7CFC9-F7D5-4906-8434-B36433B1EEE9"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BA53FC7-981A-4662-8A4E-CEC6B50A136E"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8F8F663-B6EA-4261-AB8C-875C72412405"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B74BFFE5-477F-4053-86A2-C9B40AFAB779"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64FCD94A-E1F5-4E7D-A8E6-FA52851096AD"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F55E06A3-4B50-4076-836C-FC773C0F7F29"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B432586F-E6EF-4028-8CFB-895674661150"
},
{
"criteria": "cpe:2.3:a:makotemplates:mako:0.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E68F133F-B40C-44F8-81CF-68D2B7040A58"
}
],
"operator": "OR"
}
]
}
]