Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-6387
HistoryDec 24, 2013 - 12:00 a.m.

CVE-2013-6387

2013-12-2400:00:00
ubuntu.com
ubuntu.com
6

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

37.8%

Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x
before 7.24 allows remote authenticated users with certain permissions to
inject arbitrary web script or HTML via the description field.

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

37.8%