Lucene search

K
cvelistMitreCVELIST:CVE-2009-4924
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4924

2022-10-0316:24:04
mitre
www.cve.org
cve-2009-4924
python
cjson
cross-site scripting
firefox

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

Dan Pascu python-cjson 1.0.5 does not properly handle a [‘/’] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

Related for CVELIST:CVE-2009-4924