Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2010-11-05T22:00:00
Updated: 2010-12-10T10:00:00
Reserved: 2010-06-28T00:00:00
Link: CVE-2010-2477
JSON object: View
NVD Information
Status : Modified
Published: 2010-11-06T00:00:01.970
Modified: 2010-12-10T06:43:09.773
Link: CVE-2010-2477
JSON object: View
Redhat Information
No data.
CWE