CVE-2017-20156

KRITISCH 9.8CVE-2017-20156 · Published 31/12/2022 · updated 17/06/2026

Kurz gesagt

CVE-2017-20156 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in printer (printer project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.1%, höher als bei 81.6% aller Schwachstellen.
Abhilfe: auf 2017-07-08 oder neuer aktualisieren.

Package	Affected versions	Patched versions
printer printer_project	`< 2017-07-08`	`2017-07-08`

Description

A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/prepare_page.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named 5f8c715d6e2cc000f621a6833f0a86a673462136. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217139.

References

exciting-io/printer commit 5f8c715 · Patch
exciting-io/printer · Issue Tracking
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free