CVE-2009-5031: opensuse Cross-site Scripting
Vulnerability summary
CVE-2009-5031 is a medium (CVSS 4.3) Cross-site Scripting vulnerability in opensuse. EPSS estimates a 2.93% chance of exploitation in the next 30 days, higher than 86.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 22-07-2012PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.93%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.93% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Opensuse1 product
- opensuseEOL11.4 | 12.2 | 12.3
Trustwave1 product
- modsecurity< 2.5.11
2 vendors · 2 products
References
11 links- lists.opensuse.org/opensuse-updates/2013-08/msg00031.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-08/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdfX Refsource MISCThird Party Advisory
- mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGESX Refsource CONFIRMBroken Link
- blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.htmlX Refsource MISCThird Party Advisory
Show all 11 references
- lists.opensuse.org/opensuse-updates/2013-08/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory