Lucene search
HistoryApr 26, 2010 - 7:30 p.m.
CVE-2010-1539
cve-2010-1539
cross-site scripting
xss
vulnerability
workflow module
drupal
nvd
2.1 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.4%
Cross-site scripting (XSS) vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field.
Affected configurations
Node
john_vandykworkflowMatch5.x-2.0
ORjohn_vandykworkflowMatch5.x-2.1
ORjohn_vandykworkflowMatch5.x-2.2
ORjohn_vandykworkflowMatch5.x-2.3
ORjohn_vandykworkflowMatch5.x-2.4
ORjohn_vandykworkflowMatch5.x-2.5
ORjohn_vandykworkflowMatch5.x-2.xdev
ORjohn_vandykworkflowMatch6.x-1.0
ORjohn_vandykworkflowMatch6.x-1.0beta1
ORjohn_vandykworkflowMatch6.x-1.0beta2
ORjohn_vandykworkflowMatch6.x-1.0rc1
ORjohn_vandykworkflowMatch6.x-1.0rc3
ORjohn_vandykworkflowMatch6.x-1.0rc4
ORjohn_vandykworkflowMatch6.x-1.1
ORjohn_vandykworkflowMatch6.x-1.2
ORjohn_vandykworkflowMatch6.x-1.3
ORjohn_vandykworkflowMatch6.x-1.4
ORjohn_vandykworkflowMatch6.x-1.x-dev
drupaldrupal
Related
cvelist
cvelist
CVE-2010-1539
2010-04-26 19:00:00
prion
prion
Cross site scripting
2010-04-26 19:30:00
nvd
nvd
CVE-2010-1539
2010-04-26 19:30:00
2.1 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.4%
Related for CVE-2010-1539