CVE-2009-3648

2009-10-0914:30:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

38.8%

JSON

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with ‘administer content types’ permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

Affected configurations

Nvd

Node

apsivamservice_linksMatch6.x-1.0

AND

drupaldrupal

VendorProductVersionCPE
apsivamservice_links6.x-1.0cpe:2.3:a:apsivam:service_links:6.x-1.0:*:*:*:*:*:*:*
drupaldrupal*cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*