CVE-2015-4365

{"id": "CVE-2015-4365", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2015-06-15T14:59:21.373", "references": [{"url": "http://www.openwall.com/lists/oss-security/2015/04/25/6", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/72952", "source": "cve@mitre.org"}, {"url": "https://www.drupal.org/node/2445973", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms."}, {"lang": "es", "value": "Vulnerabilidad de XSS en el m\u00f3dulo Taxonomy Accordion para Drupal permite a usuarios remotos autenticados con ciertos permisos inyectar secuencias de comandos web arbitrarios o HTML a trav\u00e9s de vectores relacionados con t\u00e9rminos de taxonom\u00eda."}], "lastModified": "2015-06-30T14:11:43.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:taxonomy_accordion_project:taxonomy_accordion:*:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "24CC5AEC-3AFC-4F08-AEDD-32188ADF06AA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}