PT-2023-10630 · Instedd · Instedd Pollit

CVE-2017-20179 · Publicado 2023-02-21 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InSTEDD Pollit version 2.3.1

Description A critical issue affects the TourController function of the file app/controllers/tour controller.rb. The manipulation leads to an unknown weakness, and the attack may be initiated remotely. Upgrading to version 2.3.2 addresses this issue.

Recommendations For InSTEDD Pollit version 2.3.1, upgrade to version 2.3.2 to address the issue. As a temporary workaround, consider disabling the TourController function until the patch is applied.

Correção

Identificadores relacionados

CVE-2017-20179

Produtos afetados

Instedd Pollit

Referências · 7

• https://github.com/instedd/pollit/releases/tag/2.3.2 · Correção
• https://github.com/instedd/pollit/commit/6ef04f8b5972d5f16f8b86f8b53f62fac68d5498 · Correção
• https://t.me/cibsecurity/58644 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-20179 · Nota de Segurança
• https://vuldb.com/?id.221507 · Nota
• https://osv.dev/vulnerability/CVE-2017-20179 · Aviso do Fabricante
• https://vuldb.com/?ctiid.221507 · Nota