Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade yahoo-ui | Dec 10, 2025 | Dec 15, 2010 |
| Suse | — | Upgrade moodle-heUpgrade moodle-euUpgrade moodle-csUpgrade moodle-bsUpgrade moodle-ruUpgrade moodle-noUpgrade moodle-koUpgrade moodle-viUpgrade moodle-caUpgrade moodle-knUpgrade moodle-msUpgrade moodle-plUpgrade moodle-hrUpgrade moodle-slUpgrade moodle-frUpgrade moodle-ptUpgrade moodle-bgUpgrade moodle-beUpgrade moodle-thUpgrade moodle-ltUpgrade moodle-mi_tnUpgrade moodle-roUpgrade moodle-hiUpgrade moodle-zh_cnUpgrade moodle-etUpgrade moodle-ukUpgrade moodle-nnUpgrade moodle-soUpgrade moodle-jaUpgrade moodle-arUpgrade moodle-huUpgrade moodle-kaUpgrade moodle-daUpgrade moodle-lvUpgrade moodle-trUpgrade moodle-elUpgrade moodle-svUpgrade moodle-faUpgrade moodle-deUpgrade moodle-glUpgrade moodle-sqUpgrade moodle-isUpgrade moodle-nlUpgrade moodle-skUpgrade moodle-gaUpgrade moodle-kmUpgrade moodle-afUpgrade moodle-srUpgrade moodleUpgrade moodle-de_duUpgrade moodle-itUpgrade moodle-fiUpgrade moodle-tlUpgrade moodle-idUpgrade moodle-es | Feb 17, 2015 | Nov 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub