CVE-2018-17301: XSS
Published Sep 21, 2018
·Updated
Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.
Affected Software
1 affected component
EspoCRM EspoCRM=5.3.6
Event History
Sep 21, 2018
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is CVE-2018-17301?
CVE-2018-17301 is a vulnerability in EspoCRM 5.3.6 that allows for reflected cross-site scripting (XSS) attacks.
2
How does CVE-2018-17301 affect EspoCRM?
CVE-2018-17301 affects EspoCRM 5.3.6 by allowing an attacker to perform a reflected XSS attack through the name-field.tpl template in the global search panel.
3
What is the severity of CVE-2018-17301?
CVE-2018-17301 has a severity rating of 5.4, which is considered medium.
4
How can I fix CVE-2018-17301 in EspoCRM?
To fix CVE-2018-17301 in EspoCRM, it is recommended to upgrade to a version that does not contain the vulnerability.
5
Where can I find more information about CVE-2018-17301?
You can find more information about CVE-2018-17301 on the GitHub page of the EspoCRM project and the security-breachlock/CVE-2018-17301 repository.