CVE-2017-1000065: XSS

Published Jul 13, 2017

Updated

Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management(Users) functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser.

Affected Software

1 affected component

OpenMediaVault OpenMediaVault=2.1

Remediation

Patch Available

https://github.com/openmediavault/openmediavault/commit/b2db1e24d0e52b961b5c3b3329b6ee717cac53a2

Event History

Jul 13, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-1000065?

CVE-2017-1000065 is considered a medium severity vulnerability due to its potential for Cross-site scripting attacks.

How do I fix CVE-2017-1000065?

To fix CVE-2017-1000065, it is recommended to upgrade to the latest release of OpenMediaVault that addresses this vulnerability.

What are the consequences of exploiting CVE-2017-1000065?

Exploitation of CVE-2017-1000065 could allow attackers to inject and execute malicious scripts in the context of an authenticated user's browser.

Which software is affected by CVE-2017-1000065?

CVE-2017-1000065 affects OpenMediaVault version 2.1 specifically.

How does CVE-2017-1000065 affect users?

Users of OpenMediaVault 2.1 may be vulnerable to arbitrary code execution through Cross-site scripting due to this security flaw.