CVE-2013-2129

Опубликовано: 24 июн. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform content" or "edit all webform content" permissions to inject arbitrary web script or HTML via a component label.

Ссылки

http://osvdb.org/93749
http://secunia.com/advisories/53184
Vendor Advisory
http://www.securityfocus.com/bid/60218
https://drupal.org/node/2007390
Vendor Advisory
https://drupal.org/node/2007460
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84628
http://osvdb.org/93749
http://secunia.com/advisories/53184
Vendor Advisory
http://www.securityfocus.com/bid/60218
https://drupal.org/node/2007390
Vendor Advisory
https://drupal.org/node/2007460
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84628

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:nathan_haug:webform:*:*:*:*:*:*:*:*

Версия до 6.x-3.18 (включая)

cpe:2.3:a:nathan_haug:webform:6.x-3.0:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.0:beta1:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.0:beta2:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.0:beta3:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.0:beta4:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.0:beta5:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.0:beta6:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.1:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.2:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.3:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.4:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.5:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.6:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.7:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.8:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.9:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.10:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.11:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.12:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.13:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.14:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.15:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.16:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.17:*:*:*:*:*:*:*

cpe:2.3:a:nathan_haug:webform:6.x-3.x:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.0039

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-rgj7-hg55-6w35

github

около 3 лет назад