PT-2017-18727 · Tiki · Tikiwiki Cms/Groupware

Lindonb · Publicado 2017-06-26 · Atualizado 2017-07-05 · CVE-2017-9145

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware versions 12.x through 16.x

Description The issue is related to improper validation of the imgsize or lang parameter in TikiFilter.php, which can lead to XSS.

Recommendations For versions 12.x through 16.x, update the TikiFilter.php to properly validate the imgsize and lang parameters to prevent XSS.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-9145

Produtos afetados

Tikiwiki Cms/Groupware

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-9145 · Aviso do Fabricante
• https://sourceforge.net/p/tikiwiki/code/62386 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2017-9145 · Nota de Segurança