CVE-2017-16884

中危 6.1CVE-2017-16884 · Published 07/12/2017 · updated 17/06/2026

要点

CVE-2017-16884 是影响 mistserver (mistserver) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：4.3%，高于 91.2% 的漏洞。
修复：升级到 2.13 或更高版本。

Package	Affected versions	Patched versions
mistserver mistserver	`< 2.13`	`2.13`

Description

Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts.

References

hyp3rlinx.altervista.org/advisories/MIST-SERVER-v2.12-UNAUTHENTICATED-PERSISTENT-XSS-CVE-2017-16884.txt · Exploit
packetstormsecurity.com/files/145182/MistServer-2.12-Cross-Site-Scripting.html · Exploit
seclists.org/fulldisclosure/2017/Dec/2 · Exploit
news.mistserver.org/news/78/Stable+release+2.13+now+available%21 · Release Notes
exploit-db.com/exploits/43205 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free