Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-7571
4.3
MEDIUMCVSS v2
Published
October 3, 2016
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.0.0, = 8.1.0, = 8.1.5, = 8.0.4, = 8.1.8, = 8.1.9, = 8.1.6, = 8.0.5, = 8.1.2, = 8.1.7, = 8.0.6, = 8.0.1, = 8.0.2, = 8.0.3, = 8.1.3, = 8.1.1, = 8.1.4NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.0.0, = 8.1.0, = 8.1.5, = 8.0.4, = 8.1.8, = 8.1.9, = 8.1.6, = 8.0.5, = 8.1.2, = 8.1.7, = 8.0.6, = 8.0.1, = 8.0.2, = 8.0.3, = 8.1.3, = 8.1.1, = 8.1.4NVD
NPM