XSS Vulnerability in ViewVC Affects Tigris.org Products
CVE-2009-3618

Currently unrated

Key Information:

Vendor: Viewvc
Status: Viewvc
Vendor: CVE Published:; 10 November 2009

What is CVE-2009-3618?

A Cross-site scripting (XSS) vulnerability exists in the viewvc.py component of ViewVC versions prior to 1.0.9 and 1.1.2. This flaw allows attackers to inject arbitrary web scripts or HTML through the 'view' parameter, potentially compromising users' sensitive information. It is critical for users of affected versions to apply the necessary updates to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch