Lucene search

[email protected]CVE-2015-6751

HistoryAug 31, 2015 - 6:59 p.m.

CVE-2015-6751

2015-08-3118:59:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2015-6751

cross-site scripting

xss

time tracker

drupal

security vulnerability

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Time Tracker module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a (1) note added to a time entry or an (2) activity used to categorize time tracker entries.

Affected configurations

NVD

Node

time_tracker_projecttime_trackerMatch7.x-1.0drupal

time_tracker_projecttime_trackerMatch7.x-1.1drupal

time_tracker_projecttime_trackerMatch7.x-1.2drupal

time_tracker_projecttime_trackerMatch7.x-1.3drupal

CPENameOperatorVersion
time_tracker_project:time_trackertime tracker project time trackereq7.x-1.0
time_tracker_project:time_trackertime tracker project time trackereq7.x-1.1
time_tracker_project:time_trackertime tracker project time trackereq7.x-1.2
time_tracker_project:time_trackertime tracker project time trackereq7.x-1.3

CPE	Name	Operator	Version
time_tracker_project:time_tracker	time tracker project time tracker	eq	7.x-1.0
time_tracker_project:time_tracker	time tracker project time tracker	eq	7.x-1.1
time_tracker_project:time_tracker	time tracker project time tracker	eq	7.x-1.2
time_tracker_project:time_tracker	time tracker project time tracker	eq	7.x-1.3

References

cgit.drupalcode.org/time_tracker/commit/?id=436a638

www.drupal.org/node/2537296

www.drupal.org/node/2537866

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for CVE-2015-6751

drupal1 prion1 cvelist1 nvd1