Unrated
loggerhead, webgui — security advisory
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.
- Products
- loggerhead, webgui
- Affected versions
- 1.19~bzr479+dfsg-1, 1.19~bzr479+dfsg-1ubuntu1, 1.19~bzr479+dfsg-2, 1.19~bzr479+dfsg-3, 1.19~bzr494-1, 1.19~bzr511-1, 2.0.1+bzr541+ds-2, 2.0.1+bzr548-1, 2.0.3-1, 2.0.3-2, 2.0.3-3, 7.10.29-3
- Fixed versions
- Not specified
- CVEs
- CVE-2010-4208
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:20 UTC · Revision 1
Source evidence
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.
osv:UBUNTU-CVE-2010-4208
loggerhead
Fixed versions: Not specified
webgui
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
Complete source record
{
"id": "472f4096fda0cb39c6b70c91571cfdecc1f1b7b5bb752c37e7071f1bf9c178d0",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2010-4208",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2010-4208",
"summary": "Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.",
"evidence": "osv:UBUNTU-CVE-2010-4208",
"products": [
{
"name": {
"value": "loggerhead",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.19~bzr479+dfsg-1ubuntu1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "webgui",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.10.29-3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-3",
"evidence": "/affected/3/versions"
},
{
"value": "1.19~bzr494-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr511-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr541+ds-2",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr548-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.3-3",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr548-1",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-1",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-2",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-3",
"evidence": "/affected/8/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2010-4208",
"aliases": [
"UBUNTU-CVE-2010-4208"
],
"metrics": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-1",
"1.19~bzr479+dfsg-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr479+dfsg-1ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "webgui",
"purl": "pkg:deb/ubuntu/webgui?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"7.10.29-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "webgui",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-de",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-es",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-nl",
"binary_version": "7.10.29-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr479+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-3",
"1.19~bzr494-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr494-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.19~bzr511-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr511-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.0.1+bzr541+ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.1+bzr541+ds-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.0.1+bzr548-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.1+bzr548-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.0.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.3-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.0.1+bzr548-1",
"2.0.3-1",
"2.0.3-2",
"2.0.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4208.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.3-3"
}
]
}
}
],
"modified": "2026-10-17T12:52:47.055905229Z",
"provider": "osv",
"upstream": [
"CVE-2010-4208"
],
"references": [
"https://ubuntu.com/security/CVE-2010-4208",
"https://www.cve.org/CVERecord?id=CVE-2010-4208"
]
},
"related_cves": [
{
"value": "CVE-2010-4208",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 353293,
"published_at": "2010-11-07T22:00:00+00:00"
}