CVE-2009-2373: XSS
Published Jul 8, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
44 affected components
Drupal Drupal=5.0
Drupal Drupal=5.0-beta1
Drupal Drupal=5.0-beta2
Drupal Drupal=5.0-rc1
Drupal Drupal=5.0-rc2
Drupal Drupal=5.1
Drupal Drupal=5.1_rev1.1
Drupal Drupal=5.2
Drupal Drupal=5.3
Drupal Drupal=5.4
Drupal Drupal=5.5
Drupal Drupal=5.5.
Drupal Drupal=5.6
Drupal Drupal=5.7
Drupal Drupal=5.8
Drupal Drupal=5.9
Drupal Drupal=5.10
Drupal Drupal=5.11
Drupal Drupal=5.12
Drupal Drupal=5.13
Drupal Drupal=5.14
Drupal Drupal=5.15
Drupal Drupal=5.16
Drupal Drupal=6.0
Drupal Drupal=6.0-beta1
Drupal Drupal=6.0-beta2
Drupal Drupal=6.0-beta3
Drupal Drupal=6.0-beta4
Drupal Drupal=6.0-rc-1
Drupal Drupal=6.0-rc-2
Drupal Drupal=6.0-rc-3
Drupal Drupal=6.0-rc-4
Drupal Drupal=6.1
Drupal Drupal=6.2
Drupal Drupal=6.3
Drupal Drupal=6.4
Drupal Drupal=6.5
Drupal Drupal=6.6
Drupal Drupal=6.7
Drupal Drupal=6.8
Drupal Drupal=6.9
Drupal Drupal=6.10
Drupal Drupal=6.11
Drupal Drupal=6.12
Remediation
Patch Available
Event History
Jul 8, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2373?
CVE-2009-2373 is classified as a moderate severity vulnerability due to its cross-site scripting (XSS) exploitation potential.
2
How do I fix CVE-2009-2373?
To fix CVE-2009-2373, you should upgrade your Drupal installation to version 6.13 or later.
3
Which versions of Drupal are affected by CVE-2009-2373?
CVE-2009-2373 affects multiple Drupal versions including 5.0 up to 6.12.
4
What is the nature of CVE-2009-2373?
CVE-2009-2373 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
5
Can CVE-2009-2373 be exploited remotely?
Yes, CVE-2009-2373 can be exploited remotely by attackers to execute JavaScript in the context of the user’s browser.