CVE-2017-14321: XSS
Published Sep 21, 2017
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.
Affected Software
1 affected component
Mirasvit Helpdesk MX<=1.5.2
Event History
Sep 21, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14321?
CVE-2017-14321 has a medium severity rating of 5.4 on the CVSS scale.
2
How do I fix CVE-2017-14321?
To fix CVE-2017-14321, upgrade Mirasvit Helpdesk MX to version 1.5.3 or later.
3
What types of vulnerabilities are present in CVE-2017-14321?
CVE-2017-14321 contains multiple cross-site scripting (XSS) vulnerabilities.
4
What can attackers do with CVE-2017-14321?
Attackers can inject arbitrary web scripts or HTML into the administrative interface through the customer name or subject fields.
5
Which software is affected by CVE-2017-14321?
CVE-2017-14321 affects Mirasvit Helpdesk MX versions prior to 1.5.3.