CVE-2012-4484

Опубликовано: 31 окт. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the administrative interface in the Campaign Monitor module before 6.x-2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this refers to an issue in an independently developed Drupal module, and NOT an issue in the Campaign Monitor software itself (described on the campaignmonitor.com web site).

Ссылки

http://drupal.org/node/1689790
Patch
http://drupal.org/node/1691446
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/10/04/6
http://www.openwall.com/lists/oss-security/2012/10/07/1
http://drupal.org/node/1689790
Patch
http://drupal.org/node/1691446
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/10/04/6
http://www.openwall.com/lists/oss-security/2012/10/07/1

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:trexart:campaignmonitor:*:*:*:*:*:*:*:*

Версия до 6.x-2.4 (включая)

cpe:2.3:a:trexart:campaignmonitor:6.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:trexart:campaignmonitor:6.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:trexart:campaignmonitor:6.x-2.1:*:*:*:*:*:*:*

cpe:2.3:a:trexart:campaignmonitor:6.x-2.2:*:*:*:*:*:*:*

cpe:2.3:a:trexart:campaignmonitor:6.x-2.3:*:*:*:*:*:*:*

cpe:2.3:a:trexart:campaignmonitor:6.x-2.x:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-pqhc-wq43-44m5

github

около 3 лет назад