PT-2015-7309
CVE-2015-6658
·
تاريخ النشر
2015-08-24
·
تاريخ التحديث
2016-12-24
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Drupal versions 6.x through 6.36
Drupal versions 7.x through 7.38
Description
A cross-site scripting (XSS) issue in the Autocomplete system allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files.
Recommendations
For Drupal 6.x, update to version 6.37 or later.
For Drupal 7.x, update to version 7.39 or later.
As a temporary workaround, consider restricting access to the file upload functionality until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾