Lucene search
MitreCVE-2015-3365HistoryApr 21, 2015 - 4:59 p.m.
CVE-2015-3365
2015-04-2116:59:24
CWE-79
mitre
web.nvd.nist.gov
24
cve-2015-3365
cross-site scripting
xss
vulnerability
nodeauthor module
drupal
remote authenticated users
profile2 field
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
38.4%
Cross-site scripting (XSS) vulnerability in the nodeauthor module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a Profile2 field in a provided block.
Affected configurations
Node
nodeauthor_projectnodeauthorMatch-drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nodeauthor_project | nodeauthor | - | cpe:2.3:a:nodeauthor_project:nodeauthor:-:*:*:*:*:drupal:*:* |
Related
cvelist
cvelist
CVE-2015-3365
2015-04-21 16:00:00
drupal
drupal
SA-CONTRIB-2015-022 - nodeauthor - Cross Site Scripting (XSS) - Unsupported
2015-01-14 00:00:00
prion
prion
Cross site scripting
2015-04-21 16:59:00
nvd
nvd
CVE-2015-3365
2015-04-21 16:59:24
kaspersky
kaspersky
KLA10563 Multiple vulnerabilities in Drupal modules
2015-04-21 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
38.4%
Related for CVE-2015-3365