CVEvulnerability
CVE-2008-3219
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mechanism.
Affected configurations
• drupal drupal (>= 5.0 < 5.8)
• drupal drupal (>= 6.0 < 6.3)
• fedoraproject fedora 8
• fedoraproject fedora 9
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://drupal.org/node/280571 Patch, Vendor Advisory
- http://secunia.com/advisories/31079 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/07/10/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/30168 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=454849 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43701 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html Third Party Advisory
- http://drupal.org/node/280571 Patch, Vendor Advisory
- http://secunia.com/advisories/31079 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/07/10/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/30168 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=454849 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43701 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html Third Party Advisory