CVE-2014-4510

MEDIUM 4.3CVE-2014-4510 · Published 06/10/2014 · updated 17/06/2026

In short

CVE-2014-4510 is a MEDIUM (CVSS 4.3) vulnerability affecting apt-cacher (debian).
Chance of exploitation in the next 30 days (EPSS): 0.98%, higher than 62.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
apt-cacher debian	`= 0.7.26`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

anonscm.debian.org/cgit/apt-cacher-ng/apt-cacher-ng.git/diff · Exploit
seclists.org/oss-sec/2014/q2/602
seclists.org/oss-sec/2014/q2/603
sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-misc/apt-cacher-ng/files/apt-cacher-ng-0.7.26-CVE-2014-4510.patch · Exploit
securityfocus.com/bid/68136
bugzilla.redhat.com/show_bug.cgi

More vulnerabilities in apt-cacher

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free