CVE-2010-2479: XSS
Published Jun 1, 2010
·Updated
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Other sources
XSS vulnerability exploitable on Internet Explorer
Affected Software
129 affected componentsFixes available
composer/ezyang/htmlpurifier<4.1.1
composer/ezyang/htmlpurifier<4.1.1
4.1.1
Htmlpurifier Htmlpurifier<=4.1.0
Htmlpurifier Htmlpurifier<=4.1.0
Htmlpurifier Htmlpurifier<=4.1.0
Htmlpurifier Htmlpurifier=1.0.0
Htmlpurifier Htmlpurifier=1.0.0-beta
Htmlpurifier Htmlpurifier=1.0.1
Htmlpurifier Htmlpurifier=1.1.0
Htmlpurifier Htmlpurifier=1.1.1
Htmlpurifier Htmlpurifier=1.1.2
Htmlpurifier Htmlpurifier=1.2.0
Htmlpurifier Htmlpurifier=1.3.0
Htmlpurifier Htmlpurifier=1.3.1
Htmlpurifier Htmlpurifier=1.3.2
Htmlpurifier Htmlpurifier=1.4.0
Htmlpurifier Htmlpurifier=1.4.0
Htmlpurifier Htmlpurifier=1.4.1
Htmlpurifier Htmlpurifier=1.4.1
Htmlpurifier Htmlpurifier=1.5.0
Htmlpurifier Htmlpurifier=1.5.0
Htmlpurifier Htmlpurifier=1.6.0
Htmlpurifier Htmlpurifier=1.6.0
Htmlpurifier Htmlpurifier=1.6.1
Htmlpurifier Htmlpurifier=1.6.1
Htmlpurifier Htmlpurifier=2.0.0
Htmlpurifier Htmlpurifier=2.0.0
Htmlpurifier Htmlpurifier=2.0.1
Htmlpurifier Htmlpurifier=2.0.1
Htmlpurifier Htmlpurifier=2.1.0
Htmlpurifier Htmlpurifier=2.1.0
Htmlpurifier Htmlpurifier=2.1.0
Htmlpurifier Htmlpurifier=2.1.0
Htmlpurifier Htmlpurifier=2.1.0
Htmlpurifier Htmlpurifier=2.1.0
Htmlpurifier Htmlpurifier=2.1.1
Htmlpurifier Htmlpurifier=2.1.1
Htmlpurifier Htmlpurifier=2.1.1
Htmlpurifier Htmlpurifier=2.1.1
Htmlpurifier Htmlpurifier=2.1.1
Htmlpurifier Htmlpurifier=2.1.1
Htmlpurifier Htmlpurifier=2.1.2
Htmlpurifier Htmlpurifier=2.1.2
Htmlpurifier Htmlpurifier=2.1.2
Htmlpurifier Htmlpurifier=2.1.2
Htmlpurifier Htmlpurifier=2.1.2
Htmlpurifier Htmlpurifier=2.1.2
Htmlpurifier Htmlpurifier=2.1.3
Htmlpurifier Htmlpurifier=2.1.3
Htmlpurifier Htmlpurifier=2.1.3
Htmlpurifier Htmlpurifier=2.1.3
Htmlpurifier Htmlpurifier=2.1.3
Htmlpurifier Htmlpurifier=2.1.3
Htmlpurifier Htmlpurifier=2.1.4
Htmlpurifier Htmlpurifier=2.1.4
Htmlpurifier Htmlpurifier=2.1.4
Htmlpurifier Htmlpurifier=2.1.5
Htmlpurifier Htmlpurifier=2.1.5
Htmlpurifier Htmlpurifier=2.1.5
Htmlpurifier Htmlpurifier=3.0.0
Htmlpurifier Htmlpurifier=3.0.0
Htmlpurifier Htmlpurifier=3.0.0
Htmlpurifier Htmlpurifier=3.1.0
Htmlpurifier Htmlpurifier=3.1.0
Htmlpurifier Htmlpurifier=3.1.0
Htmlpurifier Htmlpurifier=3.1.0-rc1
Htmlpurifier Htmlpurifier=3.1.0-rc1
Htmlpurifier Htmlpurifier=3.1.0-rc1
Htmlpurifier Htmlpurifier=3.1.1
Htmlpurifier Htmlpurifier=3.1.1
Htmlpurifier Htmlpurifier=3.1.1
Htmlpurifier Htmlpurifier=3.2.0
Htmlpurifier Htmlpurifier=3.2.0
Htmlpurifier Htmlpurifier=3.2.0
Htmlpurifier Htmlpurifier=3.3.0
Htmlpurifier Htmlpurifier=3.3.0
Htmlpurifier Htmlpurifier=3.3.0
Htmlpurifier Htmlpurifier=4.0.0
Htmlpurifier Htmlpurifier=4.0.0
Htmlpurifier Htmlpurifier=4.0.0
Mahara mahara<=1.0.14
Mahara mahara=0.9.0
Mahara mahara=0.9.1
Mahara mahara=0.9.2
Mahara mahara=1.0.0
Mahara mahara=1.0.1
Mahara mahara=1.0.2
Mahara mahara=1.0.3
Mahara mahara=1.0.4
Mahara mahara=1.0.5
Mahara mahara=1.0.6
Mahara mahara=1.0.7
Mahara mahara=1.0.8
Mahara mahara=1.0.9
Mahara mahara=1.0.10
Mahara mahara=1.0.11
Mahara mahara=1.0.12
Mahara mahara=1.0.13
Mahara mahara=1.1.0
Mahara mahara=1.1.0-alpha1
Mahara mahara=1.1.0-alpha2
Mahara mahara=1.1.0-alpha3
Mahara mahara=1.1.0-beta1
Mahara mahara=1.1.0-beta2
Mahara mahara=1.1.0-beta3
Mahara mahara=1.1.0-beta4
Mahara mahara=1.1.0-rc1
Mahara mahara=1.1.0-rc2
Mahara mahara=1.1.1
Mahara mahara=1.1.2
Mahara mahara=1.1.3
Mahara mahara=1.1.4
Mahara mahara=1.1.5
Mahara mahara=1.1.6
Mahara mahara=1.1.7
Mahara mahara=1.1.8
Mahara mahara=1.2.0
Mahara mahara=1.2.0-alpha1
Mahara mahara=1.2.0-alpha2
Mahara mahara=1.2.0-alpha3
Mahara mahara=1.2.0-beta1
Mahara mahara=1.2.0-beta2
Mahara mahara=1.2.0-beta3
Mahara mahara=1.2.0-beta4
Mahara mahara=1.2.0-rc1
Mahara mahara=1.2.1
Mahara mahara=1.2.2
Mahara mahara=1.2.3
Mahara mahara=1.2.4
Remediation
Patch Available
Patch Available
Event History
Jun 1, 2010
Advisory Published
12:00 AM
Jul 6, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2479?
CVE-2010-2479 has been classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2010-2479?
To fix CVE-2010-2479, upgrade to HTML Purifier version 4.1.1 or later.
3
Which software is affected by CVE-2010-2479?
CVE-2010-2479 affects HTML Purifier versions prior to 4.1.1 and Mahara versions up to and including 1.0.14.
4
Can CVE-2010-2479 be exploited on web browsers?
Yes, CVE-2010-2479 is specifically exploitable on the Internet Explorer browser.
5
What type of vulnerability is CVE-2010-2479?
CVE-2010-2479 is a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts or HTML.