CVE-2015-4385 in Imagefield Info Moduleinfo

Zusammenfassung

von MITRE

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "Administer image styles" permission to inject arbitrary web script or HTML via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

05.06.2015

Veröffentlichung

15.06.2015

Moderieren

akzeptiert

Eintrag

VDB-75934

CPE

bereit

CWE

CWE-79 (bestätigt)

CVSS

3.5 (VulDB)

EPSS

0.00960

KEV

nein

Aktivitäten

very low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-4385
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-4385
CVE Details	https://www.cvedetails.com/cve/CVE-2015-4385/

◂ Zurück Übersicht Weiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!