|
|
| |
|
| |
drupal6-ctools: cross-site scripting
| Package(s): | drupal6-ctools |
CVE #(s): | CVE-2012-5559
|
| Created: | December 19, 2012 |
Updated: | December 19, 2012 |
| Description: |
From the Red Hat bugzilla entry:
The Chaos tool suite is primarily a set of APIs and tools to improve the developer experience.
The page manager node view task does not sufficiently escape node titles when setting the page title, allowing XSS.
This vulnerability is partially [mitigated] by the node task being disabled by default and limited to users that have the ability to submit or edit nodes. |
| Alerts: |
|
( Log in to post comments)
|
|
|