Cross-site Scripting (XSS) Affecting qt4-x11 package, versions <4:4.6.2-4


Severity

Recommended
0.0
medium
0
10

Snyk's Security Team recommends NVD's CVSS assessment. Learn more

Threat Intelligence

EPSS
0.73% (82nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Cross-site Scripting (XSS) vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-DEBIAN10-QT4X11-406708
  • published10 Jun 2009
  • disclosed10 Jun 2009

Introduced: 10 Jun 2009

CVE-2009-1715  (opens in a new tab)
CWE-79  (opens in a new tab)

How to fix?

Upgrade Debian:10 qt4-x11 to version 4:4.6.2-4 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream qt4-x11 package and not the qt4-x11 package as distributed by Debian. See How to fix? for Debian:10 relevant fixed versions and status.

Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges.

CVSS Scores

version 3.1