Unrated
loggerhead, webgui — security advisory
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.
- Products
- loggerhead, webgui
- Affected versions
- 1.19~bzr479+dfsg-1, 1.19~bzr479+dfsg-1ubuntu1, 1.19~bzr479+dfsg-2, 1.19~bzr479+dfsg-3, 1.19~bzr494-1, 1.19~bzr511-1, 2.0.1+bzr541+ds-2, 2.0.1+bzr548-1, 2.0.3-1, 2.0.3-2, 2.0.3-3, 7.10.29-3
- Fixed versions
- Not specified
- CVEs
- CVE-2010-4207
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:18 UTC · Revision 1
Source evidence
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.
osv:UBUNTU-CVE-2010-4207
loggerhead
Fixed versions: Not specified
webgui
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
Complete source record
{
"id": "feb18590df6fed7b274bdba167cceab100db02e4d3b64f00ce158a91a7320b95",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2010-4207",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2010-4207",
"summary": "Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.",
"evidence": "osv:UBUNTU-CVE-2010-4207",
"products": [
{
"name": {
"value": "loggerhead",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.19~bzr479+dfsg-1ubuntu1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "webgui",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.10.29-3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-3",
"evidence": "/affected/3/versions"
},
{
"value": "1.19~bzr494-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr511-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr541+ds-2",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr548-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.3-3",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr548-1",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-1",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-2",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-3",
"evidence": "/affected/8/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2010-4207",
"aliases": [
"UBUNTU-CVE-2010-4207"
],
"metrics": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-1",
"1.19~bzr479+dfsg-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr479+dfsg-1ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "webgui",
"purl": "pkg:deb/ubuntu/webgui?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"7.10.29-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "webgui",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-de",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-es",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-nl",
"binary_version": "7.10.29-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr479+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-3",
"1.19~bzr494-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr494-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.19~bzr511-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr511-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.0.1+bzr541+ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.1+bzr541+ds-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.0.1+bzr548-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.1+bzr548-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.0.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.3-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.0.1+bzr548-1",
"2.0.3-1",
"2.0.3-2",
"2.0.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4207.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.3-3"
}
]
}
}
],
"modified": "2026-10-17T12:52:35.079071919Z",
"provider": "osv",
"upstream": [
"CVE-2010-4207"
],
"references": [
"https://ubuntu.com/security/CVE-2010-4207",
"https://www.cve.org/CVERecord?id=CVE-2010-4207"
]
},
"related_cves": [
{
"value": "CVE-2010-4207",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 353229,
"published_at": "2010-11-07T22:00:00+00:00"
}