Red Hat Errata System 5.3 2011-03-22T12:54:10 Red Hat Enterprise Linux 6 Git is a fast, scalable, distributed revision control system. A cross-site scripting (XSS) flaw was found in gitweb, a simple web interface for Git repositories. A remote attacker could perform an XSS attack against victims by tricking them into visiting a specially-crafted gitweb URL. (CVE-2010-3906) All gitweb users should upgrade to these updated packages, which contain a backported patch to correct this issue. Moderate Copyright 2010 Red Hat, Inc. CVE-2010-3906 CVE-2010-3906 Git (gitweb): XSS due to missing escaping of HTML element attributes cpe:/o:redhat:enterprise_linux