CVE-2009-3299: XSS
Published Nov 3, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
21 affected components
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.6
Mahara Mahara=1.1.2
Mahara Mahara=1.0.4
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.4
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.0.10
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-alpha1
Mahara Mahara<=1.0.12
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.1.3
Mahara Mahara=1.0.7
Mahara Mahara=1.1.0
Mahara Mahara=1.1.5
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.0.11
Remediation
Patch Available
Patch Available
Patch Available
Event History
Nov 3, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3299?
CVE-2009-3299 has a moderate severity level due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2009-3299?
To fix CVE-2009-3299, you should upgrade Mahara to version 1.0.13 or 1.1.7 or later.
3
Which versions of Mahara are affected by CVE-2009-3299?
CVE-2009-3299 affects Mahara versions before 1.0.13 and 1.1.x before 1.1.7.
4
What is the nature of the vulnerability in CVE-2009-3299?
CVE-2009-3299 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
5
Can CVE-2009-3299 be exploited remotely?
Yes, CVE-2009-3299 can be exploited remotely, allowing attackers to execute scripts in users' browsers.