CVE-2018-17784: XSS
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17784?
The severity of CVE-2018-17784 is medium (6.1).
What is CVE-2018-17784?
CVE-2018-17784 refers to multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
How can an attacker exploit CVE-2018-17784?
An attacker can exploit CVE-2018-17784 by leveraging the vulnerabilities in YUI and FlashCanvas to execute a cross-site scripting (XSS) attack.
How can I fix CVE-2018-17784?
To fix CVE-2018-17784, it is recommended to upgrade SugarCRM Community Edition to a version that is not affected by the vulnerabilities.
Are there any references for CVE-2018-17784?
Yes, the following references provide more information on CVE-2018-17784: [Twitter](https://twitter.com/purplemet/status/1043979681186369537), [Exploit-DB](https://www.exploit-db.com/exploits/45594/), [Purplemet Blog](https://www.purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilities).