« List of all CVEs

CVE-2010-3906

Published: 12/17/2010 Last updated: 8/7/2024 Reserved: 10/12/2010

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

CNA assigner: canonical (cc1ad9ee-3454-478d-9317-d3e869d708bc) Requested by: n/a

Opam packages affected (1)

conf-git

Products affected (1)

Product Vendor Version
n/a n/a n/a

References (30)