CVE-2009-2937

MEDIO 4.3CVE-2009-2937 · Published 18/09/2009 · updated 16/06/2026

En resumen

CVE-2009-2937 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a planet (intertwingly).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.5%, mayor que el 91.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
planet intertwingly	`= 2.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.

References

bugs.debian.org/cgi-bin/bugreport.cgi
bugs.debian.org/cgi-bin/bugreport.cgi
intertwingly.net/blog/2009/09/09/Venus-Updates · Patch
lists.planetplanet.org/archives/devel/2009-September/001999.html · Patch
secunia.com/advisories/36636 · Vendor Advisory
secunia.com/advisories/36766 · Vendor Advisory
securityfocus.com/bid/36392 · Exploit
bugzilla.redhat.com/show_bug.cgi
redhat.com/archives/fedora-package-announce/2009-September/msg00504.html
redhat.com/archives/fedora-package-announce/2009-September/msg00525.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free