Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26…
Priority LOW 26CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."
Why it matters now
EPSS 0.03025 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 84
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:danielb:finder:6.x-1.0:*:*:*:*:*:*:* | 6.x-1.0 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha1:*:*:*:*:*:* | 6.x-1.0 alpha1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha10:*:*:*:*:*:* | 6.x-1.0 alpha10 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha11:*:*:*:*:*:* | 6.x-1.0 alpha11 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha12:*:*:*:*:*:* | 6.x-1.0 alpha12 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha13:*:*:*:*:*:* | 6.x-1.0 alpha13 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha14:*:*:*:*:*:* | 6.x-1.0 alpha14 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha15:*:*:*:*:*:* | 6.x-1.0 alpha15 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha16:*:*:*:*:*:* | 6.x-1.0 alpha16 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha17:*:*:*:*:*:* | 6.x-1.0 alpha17 | Vulnerable | Danielb |
- cpe:2.3:a:danielb:finder:6.x-1.0:*:*:*:*:*:*:* Versions 6.x-1.0 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha1:*:*:*:*:*:* Versions 6.x-1.0 alpha1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha10:*:*:*:*:*:* Versions 6.x-1.0 alpha10 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha11:*:*:*:*:*:* Versions 6.x-1.0 alpha11 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha12:*:*:*:*:*:* Versions 6.x-1.0 alpha12 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha13:*:*:*:*:*:* Versions 6.x-1.0 alpha13 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha14:*:*:*:*:*:* Versions 6.x-1.0 alpha14 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha15:*:*:*:*:*:* Versions 6.x-1.0 alpha15 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha16:*:*:*:*:*:* Versions 6.x-1.0 alpha16 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha17:*:*:*:*:*:* Versions 6.x-1.0 alpha17 Vulnerable ·Danielb
Show 74 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha18:*:*:*:*:*:* | 6.x-1.0 alpha18 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha19:*:*:*:*:*:* | 6.x-1.0 alpha19 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha2:*:*:*:*:*:* | 6.x-1.0 alpha2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha20:*:*:*:*:*:* | 6.x-1.0 alpha20 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha21:*:*:*:*:*:* | 6.x-1.0 alpha21 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha22:*:*:*:*:*:* | 6.x-1.0 alpha22 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha23:*:*:*:*:*:* | 6.x-1.0 alpha23 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha24:*:*:*:*:*:* | 6.x-1.0 alpha24 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha25:*:*:*:*:*:* | 6.x-1.0 alpha25 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha26:*:*:*:*:*:* | 6.x-1.0 alpha26 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha27:*:*:*:*:*:* | 6.x-1.0 alpha27 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha28:*:*:*:*:*:* | 6.x-1.0 alpha28 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha3:*:*:*:*:*:* | 6.x-1.0 alpha3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha4:*:*:*:*:*:* | 6.x-1.0 alpha4 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha5:*:*:*:*:*:* | 6.x-1.0 alpha5 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha6:*:*:*:*:*:* | 6.x-1.0 alpha6 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha7:*:*:*:*:*:* | 6.x-1.0 alpha7 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha8:*:*:*:*:*:* | 6.x-1.0 alpha8 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:alpha9:*:*:*:*:*:* | 6.x-1.0 alpha9 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:beta1:*:*:*:*:*:* | 6.x-1.0 beta1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:beta2:*:*:*:*:*:* | 6.x-1.0 beta2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:beta3:*:*:*:*:*:* | 6.x-1.0 beta3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:rc1:*:*:*:*:*:* | 6.x-1.0 rc1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:rc2:*:*:*:*:*:* | 6.x-1.0 rc2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:rc3:*:*:*:*:*:* | 6.x-1.0 rc3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:rc4:*:*:*:*:*:* | 6.x-1.0 rc4 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable0:*:*:*:*:*:* | 6.x-1.0 unstable0 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable1:*:*:*:*:*:* | 6.x-1.0 unstable1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable2:*:*:*:*:*:* | 6.x-1.0 unstable2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable3:*:*:*:*:*:* | 6.x-1.0 unstable3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable4:*:*:*:*:*:* | 6.x-1.0 unstable4 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable5:*:*:*:*:*:* | 6.x-1.0 unstable5 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable6:*:*:*:*:*:* | 6.x-1.0 unstable6 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.0:unstable7:*:*:*:*:*:* | 6.x-1.0 unstable7 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.1:*:*:*:*:*:*:* | 6.x-1.1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.2:*:*:*:*:*:*:* | 6.x-1.2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.3:*:*:*:*:*:*:* | 6.x-1.3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.4:*:*:*:*:*:*:* | 6.x-1.4 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.5:*:*:*:*:*:*:* | 6.x-1.5 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.6:*:*:*:*:*:*:* | 6.x-1.6 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.7:*:*:*:*:*:*:* | 6.x-1.7 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.8:*:*:*:*:*:*:* | 6.x-1.8 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.9:*:*:*:*:*:*:* | 6.x-1.9 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.10:*:*:*:*:*:*:* | 6.x-1.10 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.11:*:*:*:*:*:*:* | 6.x-1.11 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.12:*:*:*:*:*:*:* | 6.x-1.12 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.13:*:*:*:*:*:*:* | 6.x-1.13 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.14:*:*:*:*:*:*:* | 6.x-1.14 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.15:*:*:*:*:*:*:* | 6.x-1.15 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.16:*:*:*:*:*:*:* | 6.x-1.16 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.17:*:*:*:*:*:*:* | 6.x-1.17 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.18:*:*:*:*:*:*:* | 6.x-1.18 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.19:*:*:*:*:*:*:* | 6.x-1.19 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.20:*:*:*:*:*:*:* | 6.x-1.20 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.21:*:*:*:*:*:*:* | 6.x-1.21 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.23:*:*:*:*:*:*:* | 6.x-1.23 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.24:*:*:*:*:*:*:* | 6.x-1.24 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.25:*:*:*:*:*:*:* | 6.x-1.25 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:6.x-1.x-dev:*:*:*:*:*:*:* | 6.x-1.x-dev | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:* | 7.x-1.0 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.1:*:*:*:*:*:*:* | 7.x-1.1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.2:*:*:*:*:*:*:* | 7.x-1.2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.3:*:*:*:*:*:*:* | 7.x-1.3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.4:*:*:*:*:*:*:* | 7.x-1.4 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.5:*:*:*:*:*:*:* | 7.x-1.5 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.6:*:*:*:*:*:*:* | 7.x-1.6 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-1.x:dev:*:*:*:*:*:* | 7.x-1.x dev | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.0:alpha1:*:*:*:*:*:* | 7.x-2.0 alpha1 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.0:alpha2:*:*:*:*:*:* | 7.x-2.0 alpha2 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.0:alpha3:*:*:*:*:*:* | 7.x-2.0 alpha3 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.0:alpha4:*:*:*:*:*:* | 7.x-2.0 alpha4 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.0:alpha5:*:*:*:*:*:* | 7.x-2.0 alpha5 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.0:alpha6:*:*:*:*:*:* | 7.x-2.0 alpha6 | Vulnerable | Danielb |
| cpe:2.3:a:danielb:finder:7.x-2.x:dev:*:*:*:*:*:* | 7.x-2.x dev | Vulnerable | Danielb |
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha18:*:*:*:*:*:* Versions 6.x-1.0 alpha18 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha19:*:*:*:*:*:* Versions 6.x-1.0 alpha19 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha2:*:*:*:*:*:* Versions 6.x-1.0 alpha2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha20:*:*:*:*:*:* Versions 6.x-1.0 alpha20 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha21:*:*:*:*:*:* Versions 6.x-1.0 alpha21 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha22:*:*:*:*:*:* Versions 6.x-1.0 alpha22 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha23:*:*:*:*:*:* Versions 6.x-1.0 alpha23 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha24:*:*:*:*:*:* Versions 6.x-1.0 alpha24 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha25:*:*:*:*:*:* Versions 6.x-1.0 alpha25 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha26:*:*:*:*:*:* Versions 6.x-1.0 alpha26 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha27:*:*:*:*:*:* Versions 6.x-1.0 alpha27 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha28:*:*:*:*:*:* Versions 6.x-1.0 alpha28 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha3:*:*:*:*:*:* Versions 6.x-1.0 alpha3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha4:*:*:*:*:*:* Versions 6.x-1.0 alpha4 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha5:*:*:*:*:*:* Versions 6.x-1.0 alpha5 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha6:*:*:*:*:*:* Versions 6.x-1.0 alpha6 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha7:*:*:*:*:*:* Versions 6.x-1.0 alpha7 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha8:*:*:*:*:*:* Versions 6.x-1.0 alpha8 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:alpha9:*:*:*:*:*:* Versions 6.x-1.0 alpha9 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:beta1:*:*:*:*:*:* Versions 6.x-1.0 beta1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:beta2:*:*:*:*:*:* Versions 6.x-1.0 beta2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:beta3:*:*:*:*:*:* Versions 6.x-1.0 beta3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:rc1:*:*:*:*:*:* Versions 6.x-1.0 rc1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:rc2:*:*:*:*:*:* Versions 6.x-1.0 rc2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:rc3:*:*:*:*:*:* Versions 6.x-1.0 rc3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:rc4:*:*:*:*:*:* Versions 6.x-1.0 rc4 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable0:*:*:*:*:*:* Versions 6.x-1.0 unstable0 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable1:*:*:*:*:*:* Versions 6.x-1.0 unstable1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable2:*:*:*:*:*:* Versions 6.x-1.0 unstable2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable3:*:*:*:*:*:* Versions 6.x-1.0 unstable3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable4:*:*:*:*:*:* Versions 6.x-1.0 unstable4 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable5:*:*:*:*:*:* Versions 6.x-1.0 unstable5 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable6:*:*:*:*:*:* Versions 6.x-1.0 unstable6 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.0:unstable7:*:*:*:*:*:* Versions 6.x-1.0 unstable7 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.1:*:*:*:*:*:*:* Versions 6.x-1.1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.2:*:*:*:*:*:*:* Versions 6.x-1.2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.3:*:*:*:*:*:*:* Versions 6.x-1.3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.4:*:*:*:*:*:*:* Versions 6.x-1.4 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.5:*:*:*:*:*:*:* Versions 6.x-1.5 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.6:*:*:*:*:*:*:* Versions 6.x-1.6 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.7:*:*:*:*:*:*:* Versions 6.x-1.7 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.8:*:*:*:*:*:*:* Versions 6.x-1.8 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.9:*:*:*:*:*:*:* Versions 6.x-1.9 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.10:*:*:*:*:*:*:* Versions 6.x-1.10 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.11:*:*:*:*:*:*:* Versions 6.x-1.11 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.12:*:*:*:*:*:*:* Versions 6.x-1.12 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.13:*:*:*:*:*:*:* Versions 6.x-1.13 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.14:*:*:*:*:*:*:* Versions 6.x-1.14 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.15:*:*:*:*:*:*:* Versions 6.x-1.15 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.16:*:*:*:*:*:*:* Versions 6.x-1.16 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.17:*:*:*:*:*:*:* Versions 6.x-1.17 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.18:*:*:*:*:*:*:* Versions 6.x-1.18 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.19:*:*:*:*:*:*:* Versions 6.x-1.19 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.20:*:*:*:*:*:*:* Versions 6.x-1.20 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.21:*:*:*:*:*:*:* Versions 6.x-1.21 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.23:*:*:*:*:*:*:* Versions 6.x-1.23 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.24:*:*:*:*:*:*:* Versions 6.x-1.24 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.25:*:*:*:*:*:*:* Versions 6.x-1.25 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:6.x-1.x-dev:*:*:*:*:*:*:* Versions 6.x-1.x-dev Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:* Versions 7.x-1.0 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.1:*:*:*:*:*:*:* Versions 7.x-1.1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.2:*:*:*:*:*:*:* Versions 7.x-1.2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.3:*:*:*:*:*:*:* Versions 7.x-1.3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.4:*:*:*:*:*:*:* Versions 7.x-1.4 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.5:*:*:*:*:*:*:* Versions 7.x-1.5 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.6:*:*:*:*:*:*:* Versions 7.x-1.6 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-1.x:dev:*:*:*:*:*:* Versions 7.x-1.x dev Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.0:alpha1:*:*:*:*:*:* Versions 7.x-2.0 alpha1 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.0:alpha2:*:*:*:*:*:* Versions 7.x-2.0 alpha2 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.0:alpha3:*:*:*:*:*:* Versions 7.x-2.0 alpha3 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.0:alpha4:*:*:*:*:*:* Versions 7.x-2.0 alpha4 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.0:alpha5:*:*:*:*:*:* Versions 7.x-2.0 alpha5 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.0:alpha6:*:*:*:*:*:* Versions 7.x-2.0 alpha6 Vulnerable ·Danielb
- cpe:2.3:a:danielb:finder:7.x-2.x:dev:*:*:*:*:*:* Versions 7.x-2.x dev Vulnerable ·Danielb
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2012-1561
- 2026-10-03 Alias added: GHSA-jrwq-x7vh-89x6
References
Other 9
- http://drupal.org/node/1432320
- http://drupal.org/node/1432318
- [oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017
- 79015
- [oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017
- http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities
- [oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)
- http://drupalcode.org/project/finder.git/commit/58443aa
- http://drupalcode.org/project/finder.git/commit/13e2d0c
More Danielb Finder vulnerabilities
- TI-2012-01430 The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and… CVSS 2.0MEDIUM 6.0
- TI-2012-05363 Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2012-1561 · CVE Program
- CVE-2012-1561 · NVD
- FIRST EPSS
- GHSA-jrwq-x7vh-89x6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences