CVE-2011-2714

Опубликовано: 14 янв. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.

Ссылки

https://seclists.org/fulldisclosure/2011/Feb/219
Mailing List
Third Party Advisory
https://www.drupal.org/node/1056470
Vendor Advisory
https://www.openwall.com/lists/oss-security/2011/07/26/8
Mailing List
Third Party Advisory
https://seclists.org/fulldisclosure/2011/Feb/219
Mailing List
Third Party Advisory
https://www.drupal.org/node/1056470
Vendor Advisory
https://www.openwall.com/lists/oss-security/2011/07/26/8
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:data:6.x-1.0:alpha14:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00489

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qp8q-gwf5-hqh2