CVE-2017-1000506: Mautic Cross Site Scripting (XSS) vulnerability
Mautic Cross Site Scripting (XSS) vulnerability
Other sources
Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/mautic/coreto a version that resolves this vulnerability.Fixed in 2.14.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this Mautic vulnerability?
The vulnerability ID for this Mautic vulnerability is CVE-2017-1000506.
What is the severity of CVE-2017-1000506?
CVE-2017-1000506 has a severity level of medium.
What is the affected version of Mautic?
Mautic version 2.11.0 and earlier are affected by this vulnerability.
What is the potential impact of CVE-2017-1000506?
The vulnerability can result in denial of service and execution of JavaScript code.
Where can I find more information about CVE-2017-1000506?
You can find more information about CVE-2017-1000506 at the following link: https://github.com/mautic/mautic/issues/5222