Lucene search

RedhatCVE-2012-5545

HistoryDec 03, 2012 - 9:55 p.m.

CVE-2012-5545

2012-12-0321:55:02

CWE-79

redhat

web.nvd.nist.gov

cve-2012-5545

cross-site scripting

xss

sharethis module

drupal

remote code injection

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

41.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remote authenticated users with the “administer sharethis” permission to inject arbitrary web script or HTML via unspecified vectors related to “JavaScript settings.”

Affected configurations

Nvd

Node

rob_loachsharethisMatch7.x-2.0

rob_loachsharethisMatch7.x-2.1

rob_loachsharethisMatch7.x-2.2

rob_loachsharethisMatch7.x-2.3

rob_loachsharethisMatch7.x-2.4

rob_loachsharethisMatch7.x-2.xdev

AND

drupaldrupalMatch-

VendorProductVersionCPE
rob_loachsharethis7.x-2.0cpe:2.3:a:rob_loach:sharethis:7.x-2.0:*:*:*:*:*:*:*
rob_loachsharethis7.x-2.1cpe:2.3:a:rob_loach:sharethis:7.x-2.1:*:*:*:*:*:*:*
rob_loachsharethis7.x-2.2cpe:2.3:a:rob_loach:sharethis:7.x-2.2:*:*:*:*:*:*:*
rob_loachsharethis7.x-2.3cpe:2.3:a:rob_loach:sharethis:7.x-2.3:*:*:*:*:*:*:*
rob_loachsharethis7.x-2.4cpe:2.3:a:rob_loach:sharethis:7.x-2.4:*:*:*:*:*:*:*
rob_loachsharethis7.x-2.xcpe:2.3:a:rob_loach:sharethis:7.x-2.x:dev:*:*:*:*:*:*
drupaldrupal-cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rob_loach	sharethis	7.x-2.0	cpe:2.3:a:rob_loach:sharethis:7.x-2.0:::::::*
rob_loach	sharethis	7.x-2.1	cpe:2.3:a:rob_loach:sharethis:7.x-2.1:::::::*
rob_loach	sharethis	7.x-2.2	cpe:2.3:a:rob_loach:sharethis:7.x-2.2:::::::*
rob_loach	sharethis	7.x-2.3	cpe:2.3:a:rob_loach:sharethis:7.x-2.3:::::::*
rob_loach	sharethis	7.x-2.4	cpe:2.3:a:rob_loach:sharethis:7.x-2.4:::::::*
rob_loach	sharethis	7.x-2.x	cpe:2.3:a:rob_loach:sharethis:7.x-2.x:dev::::::
drupal	drupal	-	cpe:2.3:a:drupal:drupal:-:::::::*

References

drupal.org/node/1808760

drupal.org/node/1808856

www.openwall.com/lists/oss-security/2012/11/20/4

www.securityfocus.com/bid/55870

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

41.3%

JSON

Related for CVE-2012-5545