CVE-2012-2339: XSS
Published May 21, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."
Affected Software
14 affected components
Nancy Wichmann Glossary=6.x-1.0
Nancy Wichmann Glossary=6.x-1.0-beta1
Nancy Wichmann Glossary=6.x-1.0-beta2
Nancy Wichmann Glossary=6.x-1.0-beta3
Nancy Wichmann Glossary=6.x-1.0-beta4
Nancy Wichmann Glossary=6.x-1.0-beta5
Nancy Wichmann Glossary=6.x-1.0-dev
Nancy Wichmann Glossary=6.x-1.1
Nancy Wichmann Glossary=6.x-1.2
Nancy Wichmann Glossary=6.x-1.3
Nancy Wichmann Glossary=6.x-1.4
Nancy Wichmann Glossary=6.x-1.5
Nancy Wichmann Glossary=6.x-1.6
Drupal Drupal
Event History
May 21, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2339?
CVE-2012-2339 is considered a medium severity issue due to its ability to allow cross-site scripting attacks.
2
How do I fix CVE-2012-2339?
To fix CVE-2012-2339, update the Glossary module to version 6.x-1.8 or later.
3
What systems are affected by CVE-2012-2339?
CVE-2012-2339 affects versions 6.x-1.0 to 6.x-1.7 of the Glossary module for Drupal.
4
What types of attacks are possible with CVE-2012-2339?
CVE-2012-2339 allows attackers to inject arbitrary web scripts or HTML, leading to potential data theft or session hijacking.
5
Is CVE-2012-2339 specific to any web application framework?
Yes, CVE-2012-2339 is specific to the Drupal content management system, particularly the Glossary module.