Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2013-6387

HistoryDec 24, 2013 - 8:55 p.m.

CVE-2013-6387

2013-12-2420:55:00

Debian Security Bug Tracker

security-tracker.debian.org

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

JSON

Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field.

OSVersionArchitecturePackageVersionFilename
Debian9alldrupal7< 7.52-2+deb9u11drupal7_7.52-2+deb9u11_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	all	drupal7	< 7.52-2+deb9u11	drupal7_7.52-2+deb9u11_all.deb

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

JSON

Related for DEBIANCVE:CVE-2013-6387