PT-2018-5234 · Lavalite · Lavalite

Prodigysml · Publicado 2018-01-03 · Atualizado 2022-05-14 · CVE-2017-1000467

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LavaLite version 5.2.4

Description The issue concerns a stored cross-site scripting vulnerability within the blog creation page. This can lead to disruption of service and allow the execution of javascript code.

Recommendations For LavaLite version 5.2.4, consider disabling the blog creation page until a patch is available to prevent potential exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-1000467

GHSA-H7VH-6GMM-G7H9

Produtos afetados

Lavalite

Referências · 4

• https://github.com/LavaLite/cms/issues/209 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000467 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000467 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-h7vh-6gmm-g7h9 · Aviso do Fabricante