Unscored severity · published Feb 17, 2009
CVE-2009-0359
Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or (2) user full name.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samizdat · Nongnu
through 0.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0359
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0359
osvdb.org
http://osvdb.org/52022
Vendor Advisory
http://samizdat.nongnu.org/release-notes/samizdat-0.6.1-xss-escape-title.patch
www.mail-archive.com
http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00171.html
Patch
http://www.nongnu.org/samizdat/release-notes/samizdat-0.6.2.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/500961/100/0/threaded
Patch
http://www.securityfocus.com/bid/33768