PT-2013-4868 · Drupal · Hatch Theme

Forest Monsen · Publicado 2013-08-28 · Atualizado 2013-09-19 · CVE-2013-4138

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:N/AC:H/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hatch theme versions 7.x-1.x before 7.x-1.4

Description A cross-site scripting (XSS) issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML. The permissions required for exploitation include "Administer content," "Create new article," or "Edit any article type content."

Recommendations For Hatch theme versions 7.x-1.x before 7.x-1.4, update to version 7.x-1.4 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-4138

Produtos afetados

Hatch Theme

Referências · 4

• http://openwall.com/lists/oss-security/2013/07/17/1 · Nota
• https://drupal.org/node/2038189 · Correção
• https://drupal.org/node/2038363 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4138 · Nota de Segurança