PT-2022-7916 · Navetti · Navetti Pricepoint

W. Schober · Published 2022-06-13 · Updated 2022-10-21 · CVE-2017-20043

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Navetti PricePoint version 4.6.0.0

Description A vulnerability was found in Navetti PricePoint, classified as problematic. The issue affects some unknown functionality and leads to basic cross site scripting (Persistent). The attack can be launched remotely.

Recommendations For Navetti PricePoint version 4.6.0.0, upgrade to version 4.7.0.0 to address this issue. It is recommended to upgrade the affected component.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2017-20043

Affected Products

Navetti Pricepoint

References · 6

• 🔥 http://seclists.org/fulldisclosure/2017/Mar/24 · Exploit
• https://osv.dev/vulnerability/CVE-2017-20043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20043 · Security Note
• https://t.me/cibsecurity/44259 · Telegram Post
• https://vuldb.com/?id.97862 · Note
• https://t.me/cvenotify/31803 · Telegram Post