Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2723
cve-2012-2723
cross-site scripting
xss
vulnerability
maestro module
drupal
remote authenticated users
web script
html
nvd
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
67.8%
Cross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
blaine_langmaestroMatch7.x-1.0
ORblaine_langmaestroMatch7.x-1.0alpha1
ORblaine_langmaestroMatch7.x-1.0alpha2
ORblaine_langmaestroMatch7.x-1.0alpha3
ORblaine_langmaestroMatch7.x-1.0rc1
ORblaine_langmaestroMatch7.x-1.1
ORblaine_langmaestroMatch7.x-1.xdev
drupaldrupalMatch-
Related
prion
prion
Cross site scripting
2012-06-27 00:55:00
cvelist
cvelist
CVE-2012-2723
2012-06-27 00:00:00
nvd
nvd
CVE-2012-2723
2012-06-27 00:55:05
drupal
drupal
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
67.8%
Related for CVE-2012-2723