CVE-2017-20026: HumHub Reflected cross site scriting
A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting (Reflected). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20026?
The severity of CVE-2017-20026 is medium.
What is the affected software of CVE-2017-20026?
The affected software of CVE-2017-20026 is HumHub up to version 1.1.1.
What is the CWE of CVE-2017-20026?
The CWE of CVE-2017-20026 is CWE-79 and CWE-80.
How can the vulnerability in CVE-2017-20026 be exploited?
The vulnerability in CVE-2017-20026 can be exploited remotely by conducting a cross-site scripting attack (Reflected).
Are there any references for CVE-2017-20026?
Yes, you can find references for CVE-2017-20026 at the following URLs: http://seclists.org/fulldisclosure/2017/Mar/47 and https://vuldb.com/?id.98923.