CVE-2017-14049 in BlackCat

요약

\~에 의해 MITRE

In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 예약하다: 2017. 08. 30.
• 공개: 2017. 08. 31.
• 모더레이션: 수락
• 항목: VDB-106019
• CPE: 준비됨
• CWE: CWE-79 (확인됨)
• CVSS: 5.4 (NVD)
• EPSS: 0.00580
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Lawfirm, Hostingprovider, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-14049
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-14049
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-14049/