Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-5021HistoryJul 22, 2014 - 2:55 p.m.
CVE-2014-5021
2014-07-2214:55:00
Debian Security Bug Tracker
security-tracker.debian.org
15
2.1 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the “administer taxonomy” permission to inject arbitrary web script or HTML via an option group label.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | drupal7 | < 7.52-2+deb9u11 | drupal7_7.52-2+deb9u11_all.deb |
Related
prion
prion
Cross site scripting
2014-07-22 14:55:00
ubuntucve
ubuntucve
CVE-2014-5021
2014-07-22 00:00:00
cve
cve
CVE-2014-5021
2014-07-22 14:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: drupal7-7.29-1.fc20
2014-07-29 02:07:00
[SECURITY] Fedora 19 Update: drupal7-7.29-1.fc19
2014-07-29 02:09:51
openvas
openvas
Debian Security Advisory DSA 2983-1 (drupal7 - security update)
2014-07-20 00:00:00
Fedora Update for drupal7 FEDORA-2014-8485
2014-08-05 00:00:00
Fedora Update for drupal7 FEDORA-2014-8515
2014-08-05 00:00:00
nessus
nessus
Debian DSA-2983-1 : drupal7 - security update
2014-07-21 00:00:00
Fedora 20 : drupal7-7.29-1.fc20 (2014-8485)
2014-07-29 00:00:00
Fedora 19 : drupal7-7.29-1.fc19 (2014-8515)
2014-07-29 00:00:00
drupal
drupal
SA-CORE-2014-003 - Drupal core - Multiple vulnerabilities
2014-07-16 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
2.1 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
Related for DEBIANCVE:CVE-2014-5021