Vulnerability · NVD

CVE-2010-3906

N/A Published on 2010-12-17

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

EPSS 5.61% above median percentile 92.2%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Git Windows winget:Git.Git

Affected — Fixed in — Latest tracked 2.55.0.3 undetermined

Vulnerable CPE configurations (8)

Vendor	Product	Platform	Versions	CPE 2.3 URI
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≤1.7.3.3	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.01:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.02:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.03:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.04:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.5:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.6.0:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:git-scm:git:0.7.0:::::::*

View on NVD ↗ Advisory · secunia.com