CVE-2017-15714 in OFBiz情報

要約

〜によって MITRE

The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "__format=%27;alert(%27xss%27)" to the URL an alert window would execute.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2017年10月21日

モデレーション

承諾済み

エントリ

VDB-111330

EPSS

0.03292

KEV

いいえ

アクティビティ

非常低い

ソース

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-15714
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-15714
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-15714/

◂ 前概要次 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!