Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-14850

Опубликовано: 13 авг. 2018
Источник: debian

Описание

Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tikiwikiremovedpackage

Примечания

  • https://sourceforge.net/p/tikiwiki/code/66990

Связанные уязвимости

CVSS3: 5.4
nvd
больше 7 лет назад

Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.

CVSS3: 5.4
github
больше 3 лет назад

Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.