CVE-2009-0934
ejabberd - cross-site scripting
EPSS 0.75%
Description
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
How to fix CVE-2009-0934
To remediate CVE-2009-0934, upgrade the affected package to a fixed version below.
- Debian/ejabberd—upgrade to 2.0.5-1 or later
- Debian/ejabberd—upgrade to 2.0.1-6+lenny1 or later
Is CVE-2009-0934 being exploited?
Low — EPSS is 0.7%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 2.0.5-1
- from 0, < 2.0.1-6+lenny1