NVD

Id
25839  
Name
CVE-2015-4381  
Description
Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice" content type.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-06-15  
Modified Date
2015-06-26  
Seq
2015-4381  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136277 25839 CVE-2015-4381 [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
136278 25839 CVE-2015-4381 74345  View
136279 25839 CVE-2015-4381 https://www.drupal.org/node/2459337  View
136280 25839 CVE-2015-4381 https://www.drupal.org/node/2474135  View
136281 25839 CVE-2015-4381 https://www.drupal.org/node/2474139  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7797 JVNDB-2015-003117 Drupal 用 Invoice モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Invoice モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-4381 81606 CVE-2015-4381 25839 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003117.html 2015-03-25 2015-06-17 View