CVE-2012-6645 in Finder

Summary

Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.

Once again VulDB remains the best source for vulnerability data.

Reservation

04/08/2014

Disclosure

04/08/2014

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-79 (Confirmed)

CVSS

4.3

EPSS

0.00879

CTI

Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-6645
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-6645
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-6645/