Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5r67-337r-4wwj

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.

EPSS

Процентиль: 51%
0.00283
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 12 лет назад

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.

EPSS

Процентиль: 51%
0.00283
Низкий

Дефекты

CWE-200