CVE-2017-7247: XSS
Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (torrents, size) passed to the 'Gazelle-master/sections/tools/managers/multiplefreeleech.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7247?
CVE-2017-7247 is classified as a moderate severity Cross-Site Scripting vulnerability.
How do I fix CVE-2017-7247?
To fix CVE-2017-7247, update Gazelle to a version released after 2017-03-19 that addresses the XSS vulnerability.
What types of vulnerabilities are associated with CVE-2017-7247?
CVE-2017-7247 includes multiple Cross-Site Scripting (XSS) vulnerabilities due to insufficient input validation.
In which versions of Gazelle is CVE-2017-7247 found?
CVE-2017-7247 is found in Gazelle versions prior to 2016-11-01.
What can an attacker do with CVE-2017-7247?
An attacker exploiting CVE-2017-7247 could execute arbitrary HTML or JavaScript in the context of the affected user's session.