PT-2018-5274 · Croogo · Croogo

Prodigysml · Publicado 2018-02-09 · Atualizado 2022-05-14 · CVE-2017-1000510

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 4.x

Description The issue is related to a Cross Site Scripting (XSS) vulnerability in the Page name, which can lead to the execution of javascript code.

Recommendations For Croogo versions prior to 4.x, update to version 4.x or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-1000510

GHSA-R4H9-GV2M-9X97

Produtos afetados

Croogo

Referências · 4

• 🔥 https://github.com/croogo/croogo/issues/847 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000510 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000510 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-r4h9-gv2m-9x97 · Aviso do Fabricante