PT-2017-13299 · Squiz · Squiz Matrix

Devalias + 1 · Publicado 2017-11-30 · Atualizado 2017-12-14 · CVE-2017-14197

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Squiz Matrix versions prior to 5.3.6.1 Squiz Matrix versions 5.4.x prior to 5.4.1.3

Description An issue was discovered in Squiz Matrix, which involves multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins.

Recommendations For Squiz Matrix versions prior to 5.3.6.1, update to version 5.3.6.1 or later. For Squiz Matrix versions 5.4.x prior to 5.4.1.3, update to version 5.4.1.3 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-14197

Produtos afetados

Squiz Matrix

Referências · 3

• http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-14197 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14197 · Aviso do Fabricante