CVE-2018-8831

Опубликовано: 18 апр. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Средний

Описание

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.

Ссылки

http://seclists.org/fulldisclosure/2018/Apr/36
Exploit
Mailing List
Third Party Advisory
https://trac.kodi.tv/ticket/17814
Vendor Advisory
https://www.exploit-db.com/exploits/44487/
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Apr/36
Exploit
Mailing List
Third Party Advisory
https://trac.kodi.tv/ticket/17814
Vendor Advisory
https://www.exploit-db.com/exploits/44487/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kodi:kodi:*:*:*:*:*:*:*:*

Версия до 17.6 (включая)

EPSS

Процентиль: 99%

0.52009

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-8831

CVSS3: 6.1

ubuntu

больше 8 лет назад

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.

CVE-2018-8831

CVSS3: 6.1

debian

больше 8 лет назад

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through ...

GHSA-h8r8-r3f3-wmh3

CVSS3: 6.1

github

больше 4 лет назад

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.

ALT-PU-2019-1166

CVSS3: 6.1

altlinux

почти 8 лет назад

ALT-PU-2019-1166: package `kodi` update to version 18.0-alt1

EPSS

Процентиль: 99%

0.52009

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79