PT-2017-10862 · Tine 2.0 · Tine 2.0

Publicado 2017-11-17 · Atualizado 2017-11-29 · CVE-2017-1000164

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tine 2.0 version 2017.02.4

Description The issue allows for XSS in the Addressbook, resulting in code execution and privilege escalation.

Recommendations For version 2017.02.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-1000164

Produtos afetados

Tine 2.0

Referências · 4

• 🔥 https://forge.tine20.org/view.php?id=13228 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000164 · Nota
• https://osv.dev/vulnerability/CVE-2017-1000164 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000164 · Nota de Segurança