PT-2017-13299 · Squiz · Squiz Matrix

Devalias + 1 · Published 2017-11-30 · Updated 2017-12-14 · CVE-2017-14197

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Squiz Matrix versions prior to 5.3.6.1 Squiz Matrix versions 5.4.x prior to 5.4.1.3

Description An issue was discovered in Squiz Matrix, which involves multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins.

Recommendations For Squiz Matrix versions prior to 5.3.6.1, update to version 5.3.6.1 or later. For Squiz Matrix versions 5.4.x prior to 5.4.1.3, update to version 5.4.1.3 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-14197

Affected Products

Squiz Matrix

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14197 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14197 · Vendor Advisory
• http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities · Note