First published: Tue Feb 17 2009(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or (2) user full name.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nongnu Samizdat | <=0.6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-0359 is classified as a medium severity vulnerability due to its potential exploitation through cross-site scripting.
To fix CVE-2009-0359, upgrade to Samizdat version 0.6.2 or later to mitigate the XSS vulnerabilities.
CVE-2009-0359 affects users of Samizdat versions prior to 0.6.2, particularly remote authenticated users.
The attack vectors for CVE-2009-0359 include injecting malicious scripts through the message title and user full name fields.
Yes, CVE-2009-0359 is a known issue documented in earlier versions of Samizdat prior to the patched release.