SA-CONTRIB-2014-023 - Project Issue File Review - XSS

🗓️ 26 Feb 2014 00:00:00Reported by Drupal Security TeamType

Project Issue File Review module, client-server model, plugin API for distributed operations, cross-site scripting vulnerabilities, PIFR environments' administrative permission, PIFR testing environment, PIFR client isolation, CVE-2014-8765, Drupal core not affected, upgrade to Project Issue File Review 6.x-2.17

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2014-8765	14 Oct 201414:00	–	cve
Cvelist	CVE-2014-8765	14 Oct 201414:00	–	cvelist
EUVD	EUVD-2014-8596	7 Oct 202500:30	–	euvd
NVD	CVE-2014-8765	14 Oct 201414:55	–	nvd
Prion	Cross site scripting	14 Oct 201414:55	–	prion
RedhatCVE	CVE-2014-8765	22 May 202513:31	–	redhatcve

Source	Link
twitter	www.twitter.com/drupalsecurity
drupal	www.drupal.org/security-team/risk-levels
drupal	www.drupal.org/user/148199
drupal	www.drupal.org/user/3064
drupal	www.drupal.org/contact
drupal	www.drupal.org/project/project_issue_file_review
drupal	www.drupal.org/writing-secure-code
drupal	www.drupal.org/security-team
drupal	www.drupal.org/security/secure-configuration
drupal	www.drupal.org/user/99777

26 Feb 2014 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

EPSS0.00285