CVE-2017-18402: XSS
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·01:11 PM
Data Sourced
via MITRE·01:11 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18402?
CVE-2017-18402 is classified as a medium severity vulnerability due to its potential for stored cross-site scripting.
2
How do I fix CVE-2017-18402?
To fix CVE-2017-18402, upgrade cPanel to version 68.0.15 or later.
3
What type of vulnerability is CVE-2017-18402?
CVE-2017-18402 is a stored cross-site scripting (XSS) vulnerability.
4
Which versions of cPanel are affected by CVE-2017-18402?
CVE-2017-18402 affects cPanel versions prior to 68.0.15, specifically versions from 61.9999.55 to 62.0.35, 63.9999.74 to 64.0.42, 65.9999.38 to 66.0.34, and 67.9999.64 to 68.0.15.
5
What can an attacker do exploiting CVE-2017-18402?
An attacker exploiting CVE-2017-18402 can execute malicious scripts in the context of other users' sessions.