CVE-2017-14921

概要

参考情報

• openwall.com/lists/oss-security/2017/09/28/11 · Mailing List
• tine20/Tine-2.0-Open-Source-Groupware-and-CRM commit 146c5aa · Issue Tracking
• tine20/Tine-2.0-Open-Source-Groupware-and-CRM commit 24e39e1 · Issue Tracking
• tine20/Tine-2.0-Open-Source-Groupware-and-CRM commit bc8a6fb · Issue Tracking
• tine20/Tine-2.0-Open-Source-Groupware-and-CRM release · Issue Tracking

tine 2.0 のその他の脆弱性

• CVE-2017-1000164中 5.4Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation
• CVE-2017-14923中 5.4Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to…
• CVE-2017-14922中 5.4Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 al…