CVE-2017-9140

概要

参考情報

• telerik.com/support/whats-new/reporting/release-history/telerik-reporting-r1-2017-sp2-%28version-11-0-17-406%29
• knowledgebase.progress.com/articles/Article/Security-Advisory-for-Resolving-Security-vulnerabilities-September-2018 · Third Party Advisory
• veracode.com/blog/research/anatomy-cross-site-scripting-flaw-telerik-reporting-module · Third Party Advisory

sitefinity cms のその他の脆弱性

• CVE-2017-18639中 6.1Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parame…
• CVE-2018-17054中 6.1Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to…
• CVE-2018-17053中 6.1Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to…
• CVE-2018-17056中 6.1Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to in…