Unrated
loggerhead, webgui — security advisory
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.
- Products
- loggerhead, webgui
- Affected versions
- 1.19~bzr479+dfsg-1, 1.19~bzr479+dfsg-1ubuntu1, 1.19~bzr479+dfsg-2, 1.19~bzr479+dfsg-3, 1.19~bzr494-1, 1.19~bzr511-1, 2.0.1+bzr541+ds-2, 2.0.1+bzr548-1, 2.0.3-1, 2.0.3-2, 2.0.3-3, 7.10.29-3
- Fixed versions
- Not specified
- CVEs
- CVE-2010-4209
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:19 UTC · Revision 1
Source evidence
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.
osv:UBUNTU-CVE-2010-4209
loggerhead
Fixed versions: Not specified
webgui
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
loggerhead
Fixed versions: Not specified
Complete source record
{
"id": "d7cf9a97c4ed950e3e4eb9c0790bec0b1403e21a66f7d53e4c2346c29e2d448c",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2010-4209",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2010-4209",
"summary": "Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.",
"evidence": "osv:UBUNTU-CVE-2010-4209",
"products": [
{
"name": {
"value": "loggerhead",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.19~bzr479+dfsg-1ubuntu1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "webgui",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.10.29-3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr479+dfsg-3",
"evidence": "/affected/3/versions"
},
{
"value": "1.19~bzr494-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.19~bzr511-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr541+ds-2",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr548-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.3-3",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "loggerhead",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+bzr548-1",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-1",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-2",
"evidence": "/affected/8/versions"
},
{
"value": "2.0.3-3",
"evidence": "/affected/8/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2010-4209",
"aliases": [
"UBUNTU-CVE-2010-4209"
],
"metrics": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-1",
"1.19~bzr479+dfsg-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr479+dfsg-1ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "webgui",
"purl": "pkg:deb/ubuntu/webgui?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"7.10.29-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "webgui",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-de",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-es",
"binary_version": "7.10.29-3"
},
{
"binary_name": "webgui-l10n-nl",
"binary_version": "7.10.29-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr479+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.19~bzr479+dfsg-3",
"1.19~bzr494-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr494-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.19~bzr511-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "1.19~bzr511-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.0.1+bzr541+ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.1+bzr541+ds-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.0.1+bzr548-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.1+bzr548-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.0.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.3-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "loggerhead",
"purl": "pkg:deb/ubuntu/loggerhead?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.0.1+bzr548-1",
"2.0.3-1",
"2.0.3-2",
"2.0.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-4209.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "loggerhead",
"binary_version": "2.0.3-3"
}
]
}
}
],
"modified": "2026-10-17T12:52:36.193067788Z",
"provider": "osv",
"upstream": [
"CVE-2010-4209"
],
"references": [
"https://ubuntu.com/security/CVE-2010-4209",
"https://www.cve.org/CVERecord?id=CVE-2010-4209"
]
},
"related_cves": [
{
"value": "CVE-2010-4209",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 353240,
"published_at": "2010-11-07T22:00:00+00:00"
}