CVE-2008-3218

Опубликовано: 18 июл. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified OpenID values.

Ссылки

http://drupal.org/node/280571
Vendor Advisory
http://secunia.com/advisories/31079
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/10/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/30168
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=454849
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43704
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html
Third Party Advisory
http://drupal.org/node/280571
Vendor Advisory
http://secunia.com/advisories/31079
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/10/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/30168
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=454849
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43704
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00518

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-3218

ubuntu

почти 17 лет назад

CVE-2008-3218

debian

почти 17 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x befo ...

GHSA-6cj8-c359-p7q9

github

около 3 лет назад

Drupal vulnerable to Cross-site Scripting

EPSS

Процентиль: 66%

0.00518

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79