CVE-2014-5267

modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to have unspecified impact via a crafted DOCTYPE declaration in…

published September 30, 2014

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to have unspecified impact via a crafted DOCTYPE declaration in an XRDS document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04366 · 91.2th percentile
Published
2014-09-30T14:00Z
EPSS history
Timeline
  • 30 SEP 14:00Z
    modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to have unspecified impact via a crafted DOCTYPE declaration in…
    cvelistv5