PT-2017-11804 · Rise · Rise Ultimate Project Manager

Publicado 2017-07-12 · Atualizado 2017-07-14 · CVE-2017-11182

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rise Ultimate Project Manager version 1.8

Description A security issue was discovered in the My Profile section, where all input fields are susceptible to XSS attacks.

Recommendations For version 1.8, ensure proper input validation and sanitization to prevent XSS attacks in the My Profile section. Consider temporarily restricting access to this section until a fix is implemented.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-11182

Produtos afetados

Rise Ultimate Project Manager

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-11182 · Aviso do Fabricante
• https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-11182 · Nota de Segurança