Lucene search

K
cve[email protected]CVE-2012-2065
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-2065

2022-10-0316:15:35
CWE-79
web.nvd.nist.gov
19
cve-2012-2065
cross-site scripting
xss
language icons module
drupal
nvd
security vulnerability

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

Cross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
fresolanguageiconsMatch6.x-2.0
OR
fresolanguageiconsMatch6.x-2.0alpha1
OR
fresolanguageiconsMatch6.x-2.0rc1
OR
fresolanguageiconsMatch6.x-2.0rc2
OR
fresolanguageiconsMatch6.x-2.1rc1
OR
fresolanguageiconsMatch6.x-2.xdev
OR
fresolanguageiconsMatch7.x-1.0alpha1
OR
fresolanguageiconsMatch7.x-1.0beta1
OR
fresolanguageiconsMatch7.x-1.0rc1
OR
fresolanguageiconsMatch7.x-1.xdev
AND
drupaldrupalMatch-

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

Related for CVE-2012-2065