CVEvulnerability
CVE-2008-3218
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified OpenID values.
Affected configurations
• drupal drupal (>= 6.0 < 6.3)
• fedoraproject fedora 8
• fedoraproject fedora 9
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://drupal.org/node/280571 Vendor Advisory
- http://secunia.com/advisories/31079 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/07/10/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/30168 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=454849 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43704 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html Third Party Advisory
- http://drupal.org/node/280571 Vendor Advisory
- http://secunia.com/advisories/31079 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/07/10/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/30168 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=454849 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43704 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html Third Party Advisory