CVE-2017-14049 in BlackCat

सारांश

द्वारा MITRE

In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• आरक्षित करना: 30/08/2017
• प्रकटीकरण: 31/08/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-106019
• CPE: तैयार
• CWE: CWE-79 (पुष्टि की गई)
• CVSS: 5.4 (NVD)
• EPSS: 0.00580
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Agriculture, Hostingprovider, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-14049
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-14049
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-14049/