CVE-2010-2491
roundup-tracker roundup: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days. Fixed in roundup 1.4.14.
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program.
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- roundup-tracker:roundup
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-frgf-rv99-862x | PyPI | roundup | <1.4.14 | 1.4.14 |
| PYSEC-2010-31 | PyPI | roundup | <1.4.14 | 1.4.14 |
References
- http://bugs.gentoo.org/show_bug.cgi?id=326395
- http://issues.roundup-tracker.org/issue2550654
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048018.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048061.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048221.html