{"api_version":"1","generated_at":"2026-07-23T07:16:44+00:00","cve":"CVE-2010-2477","urls":{"html":"https://cve.report/CVE-2010-2477","api":"https://cve.report/api/cve/CVE-2010-2477.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2477","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2477"},"summary":{"title":"CVE-2010-2477","description":"Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.","state":"PUBLISHED","assigner":"redhat","published_at":"2010-11-06 00:00:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.ubuntu.com/usn/USN-1026-1","name":"http://www.ubuntu.com/usn/USN-1026-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-1026-1: Python Paste vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain","name":"http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Google Groups","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/41160","name":"http://www.securityfocus.com/bid/41160","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Python Paste 'paste.httpexceptions' Multiple Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://bitbucket.org/ianb/paste/changeset/fcae59df8b56","name":"http://bitbucket.org/ianb/paste/changeset/fcae59df8b56","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"404 — Bitbucket","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole","name":"http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PylonsHQ - Blog - Paste 1.7.4 Released, Addresses XSS Security Hole","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1","name":"http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"‏مجموعات Google","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=oss-security&m=127785414818815&w=2","name":"http://marc.info/?l=oss-security&m=127785414818815&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"'[oss-security] CVE request: XSS in python paste' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42500","name":"http://secunia.com/advisories/42500","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu update for paste - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=oss-security&m=127792576822169&w=2","name":"http://marc.info/?l=oss-security&m=127792576822169&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"'Re: [oss-security] CVE request: XSS in python paste' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2477","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2477","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"0.9.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"1.7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2477","vulnerable":"1","versionEndIncluding":"1.7.3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pythonpaste","cpe5":"paste","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2010-2477","qid":"997207","title":"Python (Pip) Security Update for paste (GHSA-7gfc-2v6g-6w9f)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:32:16.840Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bitbucket.org/ianb/paste/changeset/fcae59df8b56"},{"name":"41160","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/41160"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1"},{"name":"42500","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42500"},{"name":"USN-1026-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1026-1"},{"name":"[pylons-discuss] 20100624 Paste 1.7.4, security fix for XSS hole","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain"},{"name":"[oss-security] 20100629 CVE request: XSS in python paste","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=127785414818815&w=2"},{"name":"[oss-security] 20100630 Re: CVE request: XSS in python paste","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=127792576822169&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-06-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-12-10T10:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole"},{"tags":["x_refsource_CONFIRM"],"url":"http://bitbucket.org/ianb/paste/changeset/fcae59df8b56"},{"name":"41160","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/41160"},{"tags":["x_refsource_CONFIRM"],"url":"http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1"},{"name":"42500","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42500"},{"name":"USN-1026-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1026-1"},{"name":"[pylons-discuss] 20100624 Paste 1.7.4, security fix for XSS hole","tags":["mailing-list","x_refsource_MLIST"],"url":"http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain"},{"name":"[oss-security] 20100629 CVE request: XSS in python paste","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=127785414818815&w=2"},{"name":"[oss-security] 20100630 Re: CVE request: XSS in python paste","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=127792576822169&w=2"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2010-2477","datePublished":"2010-11-05T22:00:00.000Z","dateReserved":"2010-06-28T00:00:00.000Z","dateUpdated":"2024-08-07T02:32:16.840Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-11-06 00:00:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.3.1","matchCriteriaId":"9A52C540-0909-4EDE-B753-617261E970CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"68613358-50C2-4211-A210-79FF5D50407E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BD52341-D5FB-4456-B035-58BB1602C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFC4E9B2-251A-4BB9-83C1-56DFE235D533"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.5:*:*:*:*:*:*:*","matchCriteriaId":"F1FE092E-560C-47F2-90DF-D0DF61338D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"000891AF-51D4-417A-96EF-99FC0CED4227"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"08035C06-CD68-4AD3-BB94-30E8DA2E4E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A514CCBA-A4A8-4BF3-9139-72B47F48FC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9862C0A5-E199-4329-9855-CC3A8C203AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"36D53159-E6D1-4FF3-BB11-F7F91F23C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.1:*:*:*:*:*:*:*","matchCriteriaId":"697D8726-59DB-4DD6-8BC1-00C48BA1113D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1FD6C801-32E6-41C2-BA9A-50FB01D97924"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.2:*:*:*:*:*:*:*","matchCriteriaId":"963F4A2D-C160-4AC7-AEEE-69A2647F13C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAA5051C-7ADC-402A-8529-443A1C1C57D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1519C844-E6AE-4453-B160-508B7423ECF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E3DCBFE7-A3C4-4627-89FE-4A2A56A71C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.5:*:*:*:*:*:*:*","matchCriteriaId":"3290471C-2427-43AB-A917-2BDC7C6FF210"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.6:*:*:*:*:*:*:*","matchCriteriaId":"98108B3E-3510-4C99-975A-6CA9FB3D27FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.7:*:*:*:*:*:*:*","matchCriteriaId":"279F0B5B-585E-47DC-907A-98EA56D669E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"DAFE30D1-AFC1-4BE4-AA3B-6A295E296D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2D9BC80C-690D-4602-B045-AD76A2E23E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:pythonpaste:paste:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"464EDF87-4EA8-4039-8A83-18AED9042BB5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2477","Ordinal":"1","Title":"CVE-2010-2477","CVE":"CVE-2010-2477","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2477","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.","Type":"Description","Title":"CVE-2010-2477"},{"CveYear":"2010","CveId":"2477","Ordinal":"2","NoteData":"2010-11-05","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"2477","Ordinal":"3","NoteData":"2010-12-10","Type":"Other","Title":"Modified"}]}}}