CVE-2017-16801 in Deploy정보

요약

\~에 의해 MITRE

Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbitrary web script or HTML via the Step Template Name parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2017. 11. 13.

공개

2017. 11. 13.

모더레이션

수락

항목

VDB-109303

CPE

준비됨

CWE

CWE-79 (확인됨)

CVSS

5.4 (NVD)

EPSS

0.00767

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2017-16801
NVD	https://nvd.nist.gov/vuln/detail/CVE-2017-16801
CVE Details	https://www.cvedetails.com/cve/CVE-2017-16801/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!