CVE-2010-3906
Fixed in a distro release EPSS 6%
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Products: git, git-scm git
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | git | 1:1.7.2.3-2.2 |
| Debian 13 | git | 1:1.7.2.3-2.2 |
| Debian 14 | git | 1:1.7.2.3-2.2 |
| Red Hat Enterprise Linux 6 | emacs-git | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | emacs-git-el | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-all | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-cvs | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-daemon | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-debuginfo | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-email | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-gui | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | git-svn | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | gitk | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | gitweb | 0:1.7.1-2.el6_0.1 |
| Red Hat Enterprise Linux 6 | perl-Git | 0:1.7.1-2.el6_0.1 |