exploitDog

CVE-2017-5833

Опубликовано: 03 мар. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Ссылки

http://www.openwall.com/lists/oss-security/2017/02/02/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/95875
https://www.revive-adserver.com/security/revive-sa-2017-001/
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/95875
https://www.revive-adserver.com/security/revive-sa-2017-001/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*

Версия до 4.0.0 (включая)

EPSS

Процентиль: 54%

0.00308

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-f5f4-c68c-9fjj

CVSS3: 6.1

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

EPSS

Процентиль: 54%

0.00308

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79