Every CVE Search/ Get API key

CVE-2010-0541

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10...

4.3 MediumFix available

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

Exploit likelihood

2.81%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

Record
CVE-2010-0541
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

Record
CVE-2010-0541
Updated
2026-11-02
EUVDEUVD-2010-0572 No score

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

Record
EUVD-2010-0572
Updated
2026-11-03
GitHub AdvisoriesGHSA-h9r2-943c-qg8v No score

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10...

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

Record
GHSA-h9r2-943c-qg8v
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
irb
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-devel
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-docs
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-libs
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-mode
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-tcltk
Red Hat:enterprise_linux:4::as
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
irb
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
Show 32 moreShow less
Affected packages
PackageAffectedFixed
ruby-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-devel
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-docs
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-libs
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-mode
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-tcltk
Red Hat:enterprise_linux:4::desktop
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
irb
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-devel
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-docs
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-libs
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-mode
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-tcltk
Red Hat:enterprise_linux:4::es
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
irb
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-devel
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-docs
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-libs
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-mode
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby-tcltk
Red Hat:enterprise_linux:4::ws
 before 0:1.8.1-16.el4
0:1.8.1-16.el4
ruby
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-devel
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-docs
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-irb
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-libs
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-mode
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-rdoc
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-ri
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1
ruby-tcltk
Red Hat:enterprise_linux:5::server
 before 0:1.8.5-19.el5_6.1
0:1.8.5-19.el5_6.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0541 is a medium vulnerability (CVSS 4.3) in Apple Mac Os X, published June 17, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in irb 0:1.8.1-16.el4.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open