CVE-2015-8815

{"id": "CVE-2015-8815", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2017-03-03T16:59:00.247", "references": [{"url": "http://issues.umbraco.org/issue/U4-7461", "tags": ["Exploit", "Issue Tracking"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2016/02/16/10", "tags": ["Mailing List"], "source": "cve@mitre.org"}, {"url": "http://issues.umbraco.org/issue/U4-7461", "tags": ["Exploit", "Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2016/02/16/10", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to (1) the media page, (2) the developer data edit page, or (3) the form page."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de XSS en Umbraco en versiones anteriores a 7.4.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s del nombre de par\u00e1metro a (1) la p\u00e1gina de medios, (2) la p\u00e1gina de edici\u00f3n de datos del desarrollador o (3) la p\u00e1gina de formulario."}], "lastModified": "2024-11-21T02:39:15.117", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:umbraco:umbraco:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "515649F9-861D-4A20-9D67-914BE8C26CB7", "versionEndIncluding": "7.3.8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}