CVE-2017-20116: TrueConf Server Reflected cross site scripting
Published Jun 29, 2022
·Updated
A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The manipulation of the argument checkedgroupid leads to basic cross site scripting (Reflected). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
TrueConf Server<5.0.2
Event History
Jun 29, 2022
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-20116?
The severity of CVE-2017-20116 is medium with a severity value of 5.4.
2
How does CVE-2017-20116 affect TrueConf Server?
CVE-2017-20116 affects TrueConf Server version 4.3.7 up to and excluding version 5.0.2.
3
What is the vulnerability type of CVE-2017-20116?
CVE-2017-20116 is a cross site scripting (Reflected) vulnerability.
4
Can CVE-2017-20116 be exploited remotely?
Yes, CVE-2017-20116 can be exploited remotely.
5
How can I fix CVE-2017-20116?
To fix CVE-2017-20116, it is recommended to upgrade TrueConf Server to a version higher than or equal to 5.0.2.