Search for vulnerabilities
| Vulnerability ID | VCID-pdhy-n3zb-u3en |
| Aliases |
CVE-2010-3906
|
| Summary | (gitweb): XSS due to missing escaping of HTML element attributes |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 3.9 |
| Risk | 7.8 |
| Affected and Fixed Packages | Package Details |
| System | Score | Found at |
|---|---|---|
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| epss | 0.13918 | https://api.first.org/data/v1/epss?cve=CVE-2010-3906 |
| cvssv2 | 4.3 | https://nvd.nist.gov/vuln/detail/CVE-2010-3906 |
| Data source | Exploit-DB |
|---|---|
| Date added | Dec. 16, 2010 |
| Description | gitWeb 1.7.3.3 - Cross-Site Scripting |
| Ransomware campaign use | Known |
| Source publication date | Dec. 15, 2010 |
| Exploit type | webapps |
| Platform | cgi |
| Source update date | Sept. 17, 2018 |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.94273 |
| EPSS Score | 0.13918 |
| Published At | April 1, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-04-01T14:56:51.865697+00:00 | RedHat Importer | Import | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3906.json | 38.0.0 |