CVE-2009-10002

MEDIUM 6.1CVE-2009-10002 · Published 13/01/2023 · updated 16/06/2026

In short

CVE-2009-10002 is a MEDIUM (CVSS 6.1) vulnerability affecting fittr flickr (fittr flickr project).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.9% of all vulnerabilities.
Fix: update to 2009-11-03 or later.

Package	Affected versions	Patched versions
fittr flickr fittr_flickr_project	`< 2009-11-03`	`2009-11-03`

Description

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is 08875dd8a2e5d0d16568bb0d67cb4328062fccde. It is recommended to apply a patch to fix this issue. The identifier VDB-218297 was assigned to this vulnerability.

References

dpup/fittr-flickr commit 08875dd · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free