PT-2019-6591 · Statusnet · Statusnet

Josh Bressers · Published 2019-11-20 · Updated 2019-11-21 · CVE-2010-4659

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions StatusNet versions prior to 2011

Description The issue is related to a cross-site scripting (XSS) vulnerability in error message contents. This type of vulnerability allows attackers to inject malicious scripts into content from otherwise trusted websites.

Recommendations For versions prior to 2011, update to a version released after 2010 to resolve the issue. As a temporary workaround, consider restricting the display of error messages to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-4659

Affected Products

Statusnet

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-4659 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-4659 · Vendor Advisory
• https://openwall.com/lists/oss-security/2011/01/25/13 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4659 · Note
• https://t.me/cibsecurity/8233 · Telegram Post
• https://access.redhat.com/security/cve/cve-2010-4659 · Note