CVE-2009-2937

MITTEL 4.3CVE-2009-2937 · Published 18/09/2009 · updated 16/06/2026

Kurz gesagt

CVE-2009-2937 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in planet (intertwingly).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.5%, höher als bei 91.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
planet intertwingly	`= 2.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.

References

bugs.debian.org/cgi-bin/bugreport.cgi
bugs.debian.org/cgi-bin/bugreport.cgi
intertwingly.net/blog/2009/09/09/Venus-Updates · Patch
lists.planetplanet.org/archives/devel/2009-September/001999.html · Patch
secunia.com/advisories/36636 · Vendor Advisory
secunia.com/advisories/36766 · Vendor Advisory
securityfocus.com/bid/36392 · Exploit
bugzilla.redhat.com/show_bug.cgi
redhat.com/archives/fedora-package-announce/2009-September/msg00504.html
redhat.com/archives/fedora-package-announce/2009-September/msg00525.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free