CVE Feed

    Dashboard / CVE / CVE-2010-3906

    CVE-2010-3906

    Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

    Published:Dec 15, 2010
    Last Modified:Apr 11, 2025
    EPS:Dec 17, 2010
    EPSS Score:0.1349
    CVSS Score:4.3

    Affected Products

    Vendor
    Git
    Product
    Git
    Vendor
    Git-scm
    Product
    Git
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://www.exploit-db.com/exploits/15744http://www.securityfocus.com/bid/45439http://www.exploit-db.com/exploits/15744http://www.securityfocus.com/bid/45439https://www.exploit-db.com/exploits/15744

    Related CVEs

    CVE-2025-59433 (CVSS 5.3) — Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. P…
    CVE-2025-48384 (CVSS 8) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2025-48385 (CVSS 8.6) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2025-48386 (CVSS 6.3) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2024-52005 (CVSS 7.5) — Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or e…
    CVE-2024-50349 (CVSS 2.1) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2024-52006 (CVSS 2.1) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2024-32020 (CVSS 3.9) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32004 (CVSS 8.1) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32002 (CVSS 9) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…

    References

    http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052782.html
    http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
    http://secunia.com/advisories/42645
    http://secunia.com/advisories/42731
    http://secunia.com/advisories/42743
    http://secunia.com/advisories/43457
    http://www.exploit-db.com/exploits/15744
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:256
    http://www.redhat.com/support/errata/RHSA-2010-1003.html
    http://www.securityfocus.com/bid/45439
    http://www.securitytracker.com/id?1024905
    http://www.vupen.com/english/advisories/2010/3323
    http://www.vupen.com/english/advisories/2011/0010
    http://www.vupen.com/english/advisories/2011/0464
    http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052782.html
    http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
    http://secunia.com/advisories/42645
    http://secunia.com/advisories/42731
    http://secunia.com/advisories/42743
    http://secunia.com/advisories/43457
    http://www.exploit-db.com/exploits/15744
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:256
    http://www.redhat.com/support/errata/RHSA-2010-1003.html
    http://www.securityfocus.com/bid/45439
    http://www.securitytracker.com/id?1024905
    http://www.vupen.com/english/advisories/2010/3323
    http://www.vupen.com/english/advisories/2011/0010
    http://www.vupen.com/english/advisories/2011/0464

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High