Lucene search
HistoryMay 20, 2009 - 7:30 p.m.
CVE-2009-1738
cve
2009
1738
cross-site scripting
xss
vulnerability
feed block
drupal
nvd
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.7%
Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in “aggregator items.”
Affected configurations
Node
ivanjarosfeed_blockMatch6.x-1.0
ORivanjarosfeed_blockMatch6.x-1.0rc1
ORivanjarosfeed_blockMatch6.x-1.0rc2
ORivanjarosfeed_blockMatch6.x-1.xdev
drupaldrupalMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| ivanjaros:feed_block | ivanjaros feed block | eq | 6.x-1.0 |
| ivanjaros:feed_block | ivanjaros feed block | eq | 6.x-1.x |
Related
prion
prion
Cross site scripting
2009-05-20 19:30:00
cvelist
cvelist
CVE-2009-1738
2009-05-20 19:00:00
nvd
nvd
CVE-2009-1738
2009-05-20 19:30:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.7%
Related for CVE-2009-1738