PT-2017-16663 · Joomla · Kunena

Publicado 2017-03-22 · Atualizado 2017-11-15 · CVE-2017-5673

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kunena extension versions 5.0.2 through 5.0.4

Description The issue allows for the execution of JavaScript in the forum message subject, leading to a cross-site scripting (XSS) issue. This is due to the acceptance of JavaScript in the topic subject. Six specific files are affected by this issue.

Recommendations For Kunena extension versions 5.0.2 through 5.0.4, update to version 5.0.5 to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-5673

Produtos afetados

Kunena

Referências · 4

• 🔥 http://fox.ra.it/technical-articles/kunena-vulnerability-2017-01.html · Exploit
• http://securityfocus.com/bid/101677 · Nota
• https://osv.dev/vulnerability/CVE-2017-5673 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5673 · Nota de Segurança