CVE-2017-17477: XSS
Published Sep 25, 2020
·Updated
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.
Affected Software
1 affected component
Pexip Pexip Infinity>=10<17
Event History
Sep 25, 2020
CVE Published
via MITRE·03:30 AM
Data Sourced
via MITRE·03:30 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-17477.
2
What is the severity level of CVE-2017-17477?
The severity level of CVE-2017-17477 is medium.
3
How can an attacker exploit this vulnerability?
An unauthenticated remote attacker can achieve stored XSS via the management web interface views.
4
Which version of Pexip Infinity is affected by CVE-2017-17477?
Pexip Infinity versions 10 to 17 are affected by CVE-2017-17477.
5
How can I fix CVE-2017-17477?
To fix CVE-2017-17477, update to a version of Pexip Infinity that is later than 17.