CVE-2017-9068: XSS
Published May 18, 2017
·Updated
In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the databasetype parameter.
Affected Software
2 affected componentsFixes available
MODx MODX Revolution<=2.5.6
composer/modx/revolution<2.5.7
2.5.7
Remediation
Patch Available
Event History
May 18, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·02:43 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-9068?
CVE-2017-9068 has a medium severity rating due to the potential for reflected cross-site scripting (XSS).
2
How do I fix CVE-2017-9068?
To fix CVE-2017-9068, upgrade MODX Revolution to version 2.5.7 or later.
3
What versions of MODX Revolution are affected by CVE-2017-9068?
MODX Revolution versions prior to 2.5.7 are affected by CVE-2017-9068.
4
What type of vulnerability is CVE-2017-9068?
CVE-2017-9068 is a reflected cross-site scripting (XSS) vulnerability.
5
How can an attacker exploit CVE-2017-9068?
An attacker can exploit CVE-2017-9068 by injecting malicious payloads into various fields on the MODX Revolution setup page.