Lucene search

K
cveRedhatCVE-2012-2723
HistoryJun 27, 2012 - 12:55 a.m.

CVE-2012-2723

2012-06-2700:55:05
CWE-79
redhat
web.nvd.nist.gov
23
cve-2012-2723
cross-site scripting
xss
vulnerability
maestro module
drupal
remote authenticated users
web script
html
nvd

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

67.7%

Cross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
blaine_langmaestroMatch7.x-1.0
OR
blaine_langmaestroMatch7.x-1.0alpha1
OR
blaine_langmaestroMatch7.x-1.0alpha2
OR
blaine_langmaestroMatch7.x-1.0alpha3
OR
blaine_langmaestroMatch7.x-1.0rc1
OR
blaine_langmaestroMatch7.x-1.1
OR
blaine_langmaestroMatch7.x-1.xdev
AND
drupaldrupalMatch-
VendorProductVersionCPE
blaine_langmaestro7.x-1.0cpe:2.3:a:blaine_lang:maestro:7.x-1.0:*:*:*:*:*:*:*
blaine_langmaestro7.x-1.0cpe:2.3:a:blaine_lang:maestro:7.x-1.0:alpha1:*:*:*:*:*:*
blaine_langmaestro7.x-1.0cpe:2.3:a:blaine_lang:maestro:7.x-1.0:alpha2:*:*:*:*:*:*
blaine_langmaestro7.x-1.0cpe:2.3:a:blaine_lang:maestro:7.x-1.0:alpha3:*:*:*:*:*:*
blaine_langmaestro7.x-1.0cpe:2.3:a:blaine_lang:maestro:7.x-1.0:rc1:*:*:*:*:*:*
blaine_langmaestro7.x-1.1cpe:2.3:a:blaine_lang:maestro:7.x-1.1:*:*:*:*:*:*:*
blaine_langmaestro7.x-1.xcpe:2.3:a:blaine_lang:maestro:7.x-1.x:dev:*:*:*:*:*:*
drupaldrupal-cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

67.7%

Related for CVE-2012-2723