CVE-2010-2032: XSS

Published May 24, 2010

Updated

Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digestrealm or (2) digestusername parameters. NOTE: some of these details are obtained from third party information.

Affected Software

3 affected components

Caucho Resin=4.0.6

Caucho Resin=3.1.5

Caucho Resin=3.1.10

Event History

May 24, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2032?

CVE-2010-2032 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2010-2032?

To fix CVE-2010-2032, upgrade to a version of Caucho Technology Resin that is not affected by this vulnerability, such as 4.0.7 or later.

What software versions are affected by CVE-2010-2032?

CVE-2010-2032 affects Caucho Technology Resin versions 3.1.5, 3.1.10, and 4.0.6.

What types of attacks can be executed using CVE-2010-2032?

CVE-2010-2032 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts through specific parameters.

Is it possible for attackers to exploit CVE-2010-2032 remotely?

Yes, CVE-2010-2032 can be exploited remotely by injecting malicious scripts via the affected web interface.