CVE-2017-20027: HumHub DOM cross site scriting
Published Jun 9, 2022
·Updated
A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting (DOM). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
Affected Software
1 affected component
Humhub Humhub<1.1.1
Event History
Jun 9, 2022
CVE Published
via MITRE·10:36 PM
Data Sourced
via MITRE·10:36 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
CVE-2017-20027
2
What is the severity level of CVE-2017-20027?
The severity level of CVE-2017-20027 is medium.
3
How does CVE-2017-20027 affect HumHub?
CVE-2017-20027 affects HumHub up to version 1.0.1.
4
What is the type of vulnerability in CVE-2017-20027?
CVE-2017-20027 is a cross-site scripting (DOM) vulnerability.
5
How can I fix CVE-2017-20027?
To fix CVE-2017-20027, it is recommended to upgrade to HumHub version 1.1.1 or later.