CVE-2009-3653

Опубликовано: 09 окт. 2009

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with "administer site configuration" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output.

Ссылки

http://drupal.org/node/591724
Patch
Vendor Advisory
http://drupal.org/node/591732
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36556
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/53572
http://drupal.org/node/591724
Patch
Vendor Advisory
http://drupal.org/node/591732
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36556
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/53572

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:darren_oh:xml_sitemap:5.x-1.6:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hh76-773h-vqh2

github

около 3 лет назад