CVE-2010-4570
Last modified
CVE-2010-4570 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI.. EPSS estimates a 1.74% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Mozilla | Bugzilla | 3.7.1 | — |
| Mozilla | Bugzilla | 3.7.2 | — |
| Mozilla | Bugzilla | 3.7.3 | — |
| Mozilla | Bugzilla | 4.0 | Rc1 |
References
- http://www.bugzilla.org/security/3.2.9/Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0207Vendor Advisory
- http://www.bugzilla.org/security/3.2.9/Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0207Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4570?
How severe is CVE-2010-4570?
How do I fix CVE-2010-4570?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4563The Linux kernel, when using IPv6, allows remote attackers t…
- CVE-2010-4565The bcm_connect function in net/can/bcm.c (aka the Broadcast…
- CVE-2010-4566The web authentication form in the NT4 authentication compon…
- CVE-2010-4567Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.…
- CVE-2010-4568Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before…
- CVE-2010-4569Cross-site scripting (XSS) vulnerability in Bugzilla 3.7.1, …
- CVE-2010-4572CRLF injection vulnerability in chart.cgi in Bugzilla before…
- CVE-2010-4573The Update Installer in VMware ESXi 4.1, when a modified sfc…
- CVE-2010-4574The Pickle::Pickle function in base/pickle.cc in Google Chro…
- CVE-2010-4575The ThemeInstalledInfoBarDelegate::Observe function in brows…
- CVE-2010-4576browser/worker_host/message_port_dispatcher.cc in Google Chr…
- CVE-2010-4577The CSSParser::parseFontFaceSrc function in WebCore/css/CSSP…7.5
Are you affected by CVE-2010-4570?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST