CVE-2017-6817

Опубликовано: 12 мар. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.

Ссылки

http://www.debian.org/security/2017/dsa-3815
Third Party Advisory
http://www.securityfocus.com/bid/96601
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037959
Third Party Advisory
VDB Entry
https://codex.wordpress.org/Version_4.7.3
Patch
Vendor Advisory
https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8
Issue Tracking
Patch
Third Party Advisory
https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
Patch
Release Notes
Vendor Advisory
https://wpvulndb.com/vulnerabilities/8768
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3815
Third Party Advisory
http://www.securityfocus.com/bid/96601
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037959
Third Party Advisory
VDB Entry
https://codex.wordpress.org/Version_4.7.3
Patch
Vendor Advisory
https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8
Issue Tracking
Patch
Third Party Advisory
https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
Patch
Release Notes
Vendor Advisory
https://wpvulndb.com/vulnerabilities/8768
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Версия до 4.7.2 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02608

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-6817

CVSS3: 5.4

ubuntu

больше 8 лет назад

In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.

CVE-2017-6817

CVSS3: 5.4

debian

больше 8 лет назад

In WordPress before 4.7.3 (wp-includes/embed.php), there is authentica ...

GHSA-668g-gr9x-p9m2

CVSS3: 5.4

github

около 3 лет назад

In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.

EPSS

Процентиль: 85%

0.02608

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79