Lucene search

K
cvelistRedhatCVELIST:CVE-2010-2477
HistoryNov 05, 2010 - 10:00 p.m.

CVE-2010-2477

2010-11-0522:00:00
redhat
www.cve.org

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%

Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%