CVE-2015-5514

Опубликовано: 18 авг. 2015

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui submodule is enabled, allows user-assisted remote attackers to inject arbitrary web script or HTML via a destination field label.

Ссылки

http://www.openwall.com/lists/oss-security/2015/07/04/4
https://www.drupal.org/node/2516560
Patch
https://www.drupal.org/node/2516678
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/07/04/4
https://www.drupal.org/node/2516560
Patch
https://www.drupal.org/node/2516678
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:migrate_project:migrate:7.x-2.0:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.0:beta1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.0:beta2:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.0:beta3:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.0:rc1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.0:rc2:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.0:rc3:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.1:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.1:beta1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.2:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.2:rc1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.2:rc2:*:*:drupal:*:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.3:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.3:rc1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.4:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.4:beta1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.5:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.5:rc1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.5:rc2:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.6:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.6:beta1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.6:rc1:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.6:rc2:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.7:*:*:*:*:drupal:*:*

cpe:2.3:a:migrate_project:migrate:7.x-2.7:rc1:*:*:*:drupal:*:*

EPSS

Процентиль: 58%

0.00359

Низкий

2.6 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-8272-fxcj-x484

github

больше 3 лет назад