CVE-2009-5065: feedparser Cross-site Scripting… – CVSS 4.3 · Watchpost

← All vulnerabilities

feedparser Cross-site Scripting vulnerability

MEDIO 4.3CVE-2009-5065 · GHSA-3mwg-gp5g-fv3q · PYSEC-2011-18 · Published 11/04/2011 · updated 16/06/2026

In breve

CVE-2009-5065 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda feedparser, feedparser (mark pilgrim).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.5%, superiore al 91.6% delle vulnerabilità.
Correzione: aggiornare a 5.0 o successiva.

Package	Affected versions	Patched versions
feedparser PyPI	`< 5.0`	`5.0`
feedparser mark_pilgrim	`= 3.0= 3.0.1= 3.1= 3.2= 3.3= 4.0= 4.0.1= 4.0.2≤ 4.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

NVD description

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

References

nvd.nist.gov/vuln/detail/CVE-2009-5065 · ADVISORY
bugzilla.novell.com/show_bug.cgi · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
GitHub Advisory GHSA-3mwg-gp5g-fv3q · ADVISORY
kurtmckee/feedparser · PACKAGE
pypa/advisory-database · WEB
web.archive.org/web/20200228153921/http://www.securityfocus.com/bid/47177 · WEB
web.archive.org/web/20210329050642/http://www.mandriva.com/security/advisories · WEB
code.google.com/p/feedparser/issues/detail · WEB
lists.opensuse.org/opensuse-updates/2011-04/msg00026.html · WEB
support.novell.com/security/cve/CVE-2009-5065.html · WEB

Altre vulnerabilità di feedparser

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free