CVE-2009-0934

EUVD-2009-0931
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
process-oneejabberd
𝑥
≤ 2.0.3
process-oneejabberd
0.9
process-oneejabberd
0.9.1
process-oneejabberd
0.9.8
process-oneejabberd
1.0.0
process-oneejabberd
1.1.0
process-oneejabberd
1.1.1
process-oneejabberd
1.1.1.0
process-oneejabberd
1.1.1.1
process-oneejabberd
1.1.2
process-oneejabberd
1.1.3
process-oneejabberd
1.1.14
process-oneejabberd
2.0.0
process-oneejabberd
2.0.0:beta1
process-oneejabberd
2.0.0:rc1
process-oneejabberd
2.0.1_2:_2
process-oneejabberd
2.0.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ejabberd
bookworm
23.01-1
fixed
bullseye
21.01-2
fixed
etch
not-affected
sid
24.07-2
fixed
trixie
23.10-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ejabberd
dapper
ignored
gutsy
ignored
hardy
ignored
intrepid
ignored
jaunty
ignored
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
not-affected