Drupal cross-site scripting vulnerability via actions feature and trigger module

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2010-3094 · ADVISORY
• drupal/drupal commit 4e8e045 · WEB
• drupal/drupal · PACKAGE
• web.archive.org/web/20120915000000*/http://www.securityfocus.com/bid/42391 · WEB
• drupal.org/node/880476 · WEB
• marc.info · WEB
• marc.info · WEB
• debian.org/security/2010/dsa-2113 · WEB
• securityfocus.com/bid/42391

drupal/drupal のその他の脆弱性

• CVE-2024-55638緊急 9.8Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102…
• CVE-2024-55637緊急 9.8Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.…
• CVE-2024-55636緊急 9.8Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.…
• CVE-2024-55634高 8.1A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.…
• CVE-2024-12393中 5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site S…