PT-2017-11804 · Rise · Rise Ultimate Project Manager

Published 2017-07-12 · Updated 2017-07-14 · CVE-2017-11182

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rise Ultimate Project Manager version 1.8

Description A security issue was discovered in the My Profile section, where all input fields are susceptible to XSS attacks.

Recommendations For version 1.8, ensure proper input validation and sanitization to prevent XSS attacks in the My Profile section. Consider temporarily restricting access to this section until a fix is implemented.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-11182

Affected Products

Rise Ultimate Project Manager

References · 3

• https://osv.dev/vulnerability/CVE-2017-11182 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11182 · Security Note
• https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html · Note