CVE-2010-10004: Information Cards Module cross site scripting
First published: Mon Jan 09 2023(Updated: )
A vulnerability was found in Information Cards Module and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The name of the patch is f6bfea49ae16dc6e179df8306d39c3694f1ef186. It is recommended to upgrade the affected component. The identifier VDB-217661 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Simplesamlphp Information Cards Module | <2010-07-29 | |
| composer/simplesamlphp/simplesamlphp-module-infocard | <1.0 | 1.0 |
| <2010-07-29 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/simplesamlphp/simplesamlphp-module-infocard/releases/tag/v1.0
- https://vuldb.com/?ctiid.217661
- https://vuldb.com/?id.217661
- https://github.com/simplesamlphp/simplesamlphp-module-infocard/commit/f6bfea49ae16dc6e179df8306d39c3694f1ef186
- https://nvd.nist.gov/vuln/detail/CVE-2010-10004
- https://github.com/advisories/GHSA-2phw-rgr7-5pvh (Advisory)
Frequently Asked Questions
What is the severity of CVE-2010-10004?
The severity of CVE-2010-10004 is medium with a CVSS score of 6.1.
How does CVE-2010-10004 affect the Information Cards Module?
CVE-2010-10004 affects the Information Cards Module by allowing cross-site scripting attacks.
Can CVE-2010-10004 be exploited remotely?
Yes, CVE-2010-10004 can be initiated remotely.
How can CVE-2010-10004 be fixed?
Upgrading to version 1.0 of the Information Cards Module can address CVE-2010-10004.
What is the Common Weakness Enumeration (CWE) of CVE-2010-10004?
The Common Weakness Enumeration (CWE) of CVE-2010-10004 is CWE-79 (Cross-Site Scripting).
- collector/nvd-historical
- collector/github-advisory-latest
- alias/GHSA-2phw-rgr7-5pvh
- alias/CVE-2010-10004
- collector/nvd-cve
- collector/nvd-index
- collector/github-advisory
- agent/references
- agent/type
- agent/weakness
- agent/remedy
- agent/author
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/simplesamlphp
- canonical/simplesamlphp information cards module
- package-manager/composer