| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| project issue file review | = 6.x-2.00= 6.x-2.01= 6.x-2.02= 6.x-2.03= 6.x-2.04= 6.x-2.05= 6.x-2.06= 6.x-2.07= 6.x-2.08= 6.x-2.10= 6.x-2.12= 6.x-2.13= 6.x-2.14= 6.x-2.15≤ 6.x-2.16 |
Multiple cross-site scripting (XSS) vulnerabilities in the Project Issue File Review module (PIFR) module 6.x-2.x before 6.x-2.17 for Drupal allow (1) remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to the PIFR_Server test results page or (2) remote authenticated users with the "manage PIFR environments" permission to inject arbitrary web script or HTML via vectors involving a PIFR_Server administrative page.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン