CVE-2009-3915

Опубликовано: 09 нояб. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the "Separate title and URL" formatter in the Link module 5.x before 5.x-2.6 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the link title field.

Ссылки

http://drupal.org/node/620662
Patch
Vendor Advisory
http://drupal.org/node/620668
Patch
Vendor Advisory
http://drupal.org/node/623562
Patch
Vendor Advisory
http://osvdb.org/59672
http://secunia.com/advisories/37289
Vendor Advisory
http://www.securityfocus.com/bid/36928
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/54142
http://drupal.org/node/620662
Patch
Vendor Advisory
http://drupal.org/node/620668
Patch
Vendor Advisory
http://drupal.org/node/623562
Patch
Vendor Advisory
http://osvdb.org/59672
http://secunia.com/advisories/37289
Vendor Advisory
http://www.securityfocus.com/bid/36928
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/54142

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:john_c_fiala:link:5.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-1.4:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-1.5:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.0:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.1:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.2:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.3:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.4:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:5.x-2.5:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta1:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta2:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta3:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta4:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.2:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.3:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.5:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.6:*:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.6:beta1:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.6:beta2:*:*:*:*:*:*

cpe:2.3:a:john_c_fiala:link:6.x-2.6:beta3:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00404

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-x6w9-pvhr-m6fp

github

около 3 лет назад