CVE-2016-7571

6.1MEDIUM

Key Information

Vendor: Drupal
Status: Drupal
Vendor: CVE Published:; 3 October 2016

Summary

Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.

Refferences

https://www.drupal.org/SA-CORE-2016-004

x_refsource_CONFIRM

http://www.securityfocus.com/bid/93101

vdb-entryx_refsource_BID

http://www.securitytracker.com/id/1036886

vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Oct 3, 2016
Vulnerability Reserved
Sep 9, 2016

Collectors

NVD DatabaseMitre Database