CVE-2017-1000237

CRITICAL 9.8CVE-2017-1000237 · Published 17/11/2017 · updated 17/06/2026

In short

CVE-2017-1000237 is a CRITICAL (CVSS 9.8) vulnerability affecting i, librarian (scilico).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
i, librarian scilico	`= 4.7≤ 4.6`	No fix yet

Description

I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user's password.

References

sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt · Exploit

More vulnerabilities in i, librarian

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free