CVE-2017-20163

CRITICAL 9.8CVE-2017-20163 · Published 05/01/2023 · updated 17/06/2026

In short

CVE-2017-20163 is a CRITICAL (CVSS 9.8) vulnerability affecting nview (nview project).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 52.1% of all vulnerabilities.
Fix: update to 2017-04-28 or later.

Package	Affected versions	Patched versions
nview nview_project	`< 2017-04-28`	`2017-04-28`

Description

A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217516.

References

RedSnapper/NView commit cbd255f · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free