CVE-2014-8319

{"id": "CVE-2014-8319", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-10-17T14:55:03.220", "references": [{"url": "http://osvdb.org/103264", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/56857", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/65527", "source": "cve@mitre.org"}, {"url": "https://drupal.org/node/2194809", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91157", "source": "cve@mitre.org"}, {"url": "https://www.drupal.org/node/2194401", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the easy_social_admin_summary function in the Easy Social module 7.x-2.x before 7.x-2.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a block title."}, {"lang": "es", "value": "Vulnerabilidad de XSS en la funci\u00f3n easy_social_admin_summary en el m\u00f3dulo para Drupal Easy Social 7.x-2.x anterior a 7.x-2.11 permite a usuarios remotos autenticados con ciertos permisos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s del t\u00edtulo de un bloque."}], "lastModified": "2017-09-08T01:29:22.387", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.0:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "6DB2242A-4D58-4BA3-A316-FE5F8147126D"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.1:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "08C814D4-1AF6-4E09-9B3A-4D1141787DF4"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.2:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "95829FBF-E312-4B9F-9B9A-ABD9A20D9C49"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.3:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "29E7E053-AD3B-4224-BB3D-B2849E1CAB53"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.4:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "95A70581-B3B4-4EC5-98EC-4F094A1E5858"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.5:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "EF067355-BBE3-459D-A7C3-23ADCE87F036"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.6:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "C5A01692-C9FD-4B9F-BC1F-82F0A369D8DE"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.7:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "D4830BA8-E4B8-48EA-8A81-1AE144EA8ADB"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.8:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "33A79701-9AF8-4A25-9811-DCB489F0F4CE"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.9:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "0A352BF9-240B-4549-9CB2-17C3E7B72587"}, {"criteria": "cpe:2.3:a:easy_social_project:easy_social:7.x-2.10:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "6D17FCF0-6F18-40DA-81D5-D1E861BE48C1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}