CVE-2011-5189 in Webform Validation

Riassunto

di MITRE

Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with permissions to "update Webform nodes" to inject arbitrary web script or HTML via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 19/09/2012
• Divulgazione: 20/09/2012
• Moderazione: accettato
• Voce: VDB-62386
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 3.5 (VulDB)
• EPSS: 0.01041
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-5189
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-5189
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-5189/