mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-08 22:18:22 +00:00
33 lines
901 B
JSON
33 lines
901 B
JSON
|
{
|
||
|
|
"id": "CVE-2024-13273",
|
||
|
|
"sourceIdentifier": "mlhess@drupal.org",
|
||
|
|
"published": "2025-01-09T20:15:36.137",
|
||
|
|
"lastModified": "2025-01-09T20:15:36.137",
|
||
|
|
"vulnStatus": "Received",
|
||
|
|
"cveTags": [],
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "mlhess@drupal.org",
|
||
|
|
"type": "Secondary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-79"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "https://www.drupal.org/sa-contrib-2024-037",
|
||
|
|
"source": "mlhess@drupal.org"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|