CVE-2015-3390

{"id": "CVE-2015-3390", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2015-04-21T18:59:12.407", "references": [{"url": "http://www.openwall.com/lists/oss-security/2015/02/05/16", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/72570", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100655", "source": "cve@mitre.org"}, {"url": "https://www.drupal.org/node/2420161", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated users with the \"access administration pages\" permission to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de XSS en el m\u00f3dulo Facebook Album Fetcher para Drupal permite a usuarios remotos autenticados con el permiso 'acceder a las p\u00e1ginas de administraci\u00f3n' inyectar secuencias de comandos web o HTML a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-09-08T01:29:50.403", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:facebook_album_fetcher_project:facebook_album_fetcher:7.x-1.x-dev:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "1879F1EF-B396-47D1-AEA7-B06C543376F7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}