CVE-2012-2117

MEDIO 4.3CVE-2012-2117 · Published 31/08/2012 · updated 16/06/2026

In breve

CVE-2012-2117 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda gigya (yaniv aran-shamir).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
gigya yaniv_aran-shamir	`= .x-3.0= 6.x-3.0= 6.x-3.1= 6.x-3.x`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

drupal.org/node/1515084 · Patch
drupal.org/node/1538704 · Patch
secunia.com/advisories/48832 · Vendor Advisory
openwall.com/lists/oss-security/2012/04/18/11
openwall.com/lists/oss-security/2012/04/19/1
exchange.xforce.ibmcloud.com/vulnerabilities/75025

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free