CVE-2017-14921

MEDIO 5.4CVE-2017-14921 · Published 30/09/2017 · updated 17/06/2026

In breve

CVE-2017-14921 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda tine 2.0 (tine20).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.93%, superiore al 60.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tine 2.0 tine20	`≤ 2017.08.3`	No fix yet

Description

Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.

References

openwall.com/lists/oss-security/2017/09/28/11 · Mailing List
tine20/Tine-2.0-Open-Source-Groupware-and-CRM commit 146c5aa · Issue Tracking
tine20/Tine-2.0-Open-Source-Groupware-and-CRM commit 24e39e1 · Issue Tracking
tine20/Tine-2.0-Open-Source-Groupware-and-CRM commit bc8a6fb · Issue Tracking
tine20/Tine-2.0-Open-Source-Groupware-and-CRM release · Issue Tracking

Altre vulnerabilità di tine 2.0

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tine 2.0

tine20

≤ 2017.08.3

No fix yet

Altre vulnerabilità di tine 2.0

Vedi tutto →