CVE-2010-3906: Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp…

PriorityP425medium4.3CVSS 2.0

AVNACMAuNCNIPAN

EXPLOIT

EPSS

5.61%

92.0th percentile

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

Affected

143 ranges· showing 25

Vendor	Product	Version range	Fixed in
debian	git	< git 1:1.7.2.3-2.2 (bookworm)	git 1:1.7.2.3-2.2 (bookworm)
git-scm	git	<= 1.7.3.3	—
git-scm	git	—	—
git-scm	git	—	—
git-scm	git	—	—
git-scm	git	—	—
git-scm	git	—	—
git-scm	git	—	—
git-scm	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—
git	git	—	—

CVSS provenance

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

osv4.3MEDIUM

vendor_debian4.3MEDIUM

vendor_redhat4.3MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.