CVE-2009-1249

Опубликовано: 06 апр. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map.

Ссылки

http://drupal.org/node/414644
Patch
http://drupal.org/node/414702
Patch
Vendor Advisory
http://secunia.com/advisories/34497
Vendor Advisory
http://www.securityfocus.com/bid/34266
http://drupal.org/node/414644
Patch
http://drupal.org/node/414702
Patch
Vendor Advisory
http://secunia.com/advisories/34497
Vendor Advisory
http://www.securityfocus.com/bid/34266

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta2:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta3:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta4:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta5:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta6:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta7:*:*:*:*:*:*

cpe:2.3:a:drupal:feedapi_mapper:5.x-1.x:dev:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00256

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qfc2-5h6v-29hp

github

около 3 лет назад