Lucene search

[email protected]CVE-2015-4359

HistoryJun 15, 2015 - 2:59 p.m.

CVE-2015-4359

2015-06-1514:59:13

CWE-79

[email protected]

web.nvd.nist.gov

cve

2015-4359

xss

vulnerabilities

drupal

registration codes module

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with permission to create or edit taxonomy terms or nodes to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

registration_codes_projectregistration_codesRange≤6.x-1.x-devdrupal

registration_codes_projectregistration_codesMatch6.x-2.x-devdrupal

registration_codes_projectregistration_codesMatch7.x-1.x-devdrupal

CPENameOperatorVersion
registration_codes_project:registration_codesregistration codes project registration codesle6.x-1.x-dev
registration_codes_project:registration_codesregistration codes project registration codeseq6.x-2.x-dev
registration_codes_project:registration_codesregistration codes project registration codeseq7.x-1.x-dev

CPE	Name	Operator	Version
registration_codes_project:registration_codes	registration codes project registration codes	le	6.x-1.x-dev
registration_codes_project:registration_codes	registration codes project registration codes	eq	6.x-2.x-dev
registration_codes_project:registration_codes	registration codes project registration codes	eq	7.x-1.x-dev

References

www.openwall.com/lists/oss-security/2015/04/25/6

www.securityfocus.com/bid/72961

www.drupal.org/node/2445955

www.drupal.org/node/2465177

www.drupal.org/node/2465179

www.drupal.org/node/2465181

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVE-2015-4359

cvelist1 prion1 nvd1 drupal1