Refresh rendered dashboard snapshots

这个提交包含在:
hao
2026-03-18 14:18:50 -07:00
父节点 00d828d090
当前提交 9a5f48cdf7
修改 2488 个文件,包含 3071 行新增242002 行删除

查看文件

@@ -1,66 +0,0 @@
{
"canonical_id": "drupal--CVE-2006-0070",
"system_id": "drupal",
"display_name": "Drupal",
"category": "cms",
"advisory_mode": "core",
"title": "CVE-2006-0070",
"summary": "Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert() function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when \"Filtered HTML\" is enabled, and since \"Full HTML\" would not filter HTML by design, perhaps this should not be included in CVE",
"published_at": "2006-01-04T00:03:00.000",
"updated_at": "2025-04-03T01:03:51.193",
"severity": "medium",
"cvss_score": 4.3,
"exploit_status": "unknown",
"source_confidence": "official",
"official_source_url": "http://www.securityfocus.com/archive/1/420671/100/0/threaded",
"secondary_source_urls": [
"http://www.securityfocus.com/archive/1/420683/100/0/threaded"
],
"aliases": [
"CVE-2006-0070"
],
"cve_ids": [
"CVE-2006-0070"
],
"ghsa_ids": [],
"osv_ids": [],
"affected_versions": [],
"fixed_versions": [],
"package_name": null,
"render_markdown": false,
"case_path": null,
"secure_code_topics": [
"authz-server-side-recheck",
"xss-output-encoding",
"file-upload-validation",
"plugin-extension-trust-policy"
],
"status": "triage",
"triage_reasons": [
"missing affected/fixed version details"
],
"verification_status": "triage-manual",
"verification_mode": "synthetic",
"last_verified_at": null,
"last_run_id": null,
"evidence_bundle": null,
"historical_status": null,
"latest_status": null,
"browser_evidence": {
"required": false,
"present": false,
"refs": []
},
"repro_profile_id": "xss-generic",
"artifact_mode": "official-image",
"blocked_reason": null,
"metadata": {
"source_names": [
"NVD Drupal"
],
"source_kinds": [
"nvd-search"
],
"candidate_count": 1
}
}