symphony project records
2 published records for vendor symphony project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2017-16881No exploit | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/symphony project · symphony · CWE-79 | Medium6.1 | — | 0.8% | Nov 18, 2017 |
24Monitor | CVE-2017-16956No exploit | b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter witsymphony project · symphony · CWE-79 | Medium6.1 | — | 0.7% | Nov 27, 2017 |
- CVE-2017-1688124Monitor
b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/
MediumCVSS 6.1No exploitEPSS 0%symphony project · symphonyNov 18, 2017
- CVE-2017-1695624Monitor
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter wit
MediumCVSS 6.1No exploitEPSS 0%symphony project · symphonyNov 27, 2017