CVE-2011-0728

N/A Unknown

Published: March 29, 2011 Modified: April 29, 2026

Description

Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057413.html

Source: security@ubuntu.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057479.html

Source: security@ubuntu.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057502.html

Source: security@ubuntu.com

http://secunia.com/advisories/43822

Source: security@ubuntu.com

Vendor Advisory

http://secunia.com/advisories/44017

Source: security@ubuntu.com

http://www.osvdb.org/71279

Source: security@ubuntu.com

http://www.securityfocus.com/bid/47032

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2011/0848

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2011/0849

Source: security@ubuntu.com

https://bugs.launchpad.net/loggerhead/+bug/740142

Source: security@ubuntu.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/66305

Source: security@ubuntu.com

https://launchpad.net/loggerhead/1.18/1.18.1

Source: security@ubuntu.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057413.html