Логотип exploitDog
bind:CVE-2012-2725
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-2725

Количество 2

Количество 2

nvd логотип

CVE-2012-2725

почти 13 лет назад

classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks.

CVSS2: 3.5
EPSS: Низкий
github логотип

GHSA-7j2w-r9hq-qch3

около 3 лет назад

classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2012-2725

classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks.

CVSS2: 3.5
0%
Низкий
почти 13 лет назад
github логотип
GHSA-7j2w-r9hq-qch3

classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks.

0%
Низкий
около 3 лет назад

Уязвимостей на страницу