CVE-2009-5065
published 2011-04-11CVE-2009-5065: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to…
PriorityP423medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
4.53%
90.4th percentile
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | feedparser | < feedparser 5.0.1-1 (bookworm) | feedparser 5.0.1-1 (bookworm) |
| mark_pilgrim | feedparser | <= 4.1 | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | — | — |
| mark_pilgrim | feedparser | >= 0 < 5.0.1-1 | 5.0.1-1 |
| mark_pilgrim | feedparser | >= 0 < 5.0.1-1 | 5.0.1-1 |
| mark_pilgrim | feedparser | >= 0 < 5.0.1-1 | 5.0.1-1 |
| mark_pilgrim | feedparser | >= 0 < 5.0.1-1 | 5.0.1-1 |
| mark_pilgrim | feedparser | >= 0 < 5.0 | 5.0 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
feedparser Cross-site Scripting vulnerability
ghsa·2022-05-02
CVE-2009-5065 [MEDIUM] CWE-79 feedparser Cross-site Scripting vulnerability
feedparser Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
OSV
feedparser Cross-site Scripting vulnerability
osv·2022-05-02
CVE-2009-5065 [MEDIUM] feedparser Cross-site Scripting vulnerability
feedparser Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
OSV
CVE-2009-5065: Cross-site scripting (XSS) vulnerability in feedparser
osv·2011-04-11·CVSS 4.3
CVE-2009-5065 [MEDIUM] CVE-2009-5065: Cross-site scripting (XSS) vulnerability in feedparser
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
Debian
CVE-2009-5065: feedparser - Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Pars...
vendor_debian·2009·CVSS 4.3
CVE-2009-5065 [MEDIUM] CVE-2009-5065: feedparser - Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Pars...
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
Scope: local
bookworm: resolved (fixed in 5.0.1-1)
bullseye: resolved (fixed in 5.0.1-1)
forky: resolved (fixed in 5.0.1-1)
sid: resolved (fixed in 5.0.1-1)
trixie: resolved (fixed in 5.0.1-1)
No detection rules found.
http://code.google.com/p/feedparser/issues/detail?id=195http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.htmlhttp://secunia.com/advisories/44074http://support.novell.com/security/cve/CVE-2009-5065.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:082http://www.securityfocus.com/bid/47177https://bugzilla.novell.com/show_bug.cgi?id=680074https://bugzilla.redhat.com/show_bug.cgi?id=684877http://code.google.com/p/feedparser/issues/detail?id=195http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.htmlhttp://secunia.com/advisories/44074http://support.novell.com/security/cve/CVE-2009-5065.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:082http://www.securityfocus.com/bid/47177https://bugzilla.novell.com/show_bug.cgi?id=680074https://bugzilla.redhat.com/show_bug.cgi?id=684877
2011-04-11
Published