symphony project kayıtları
symphony project üreticisine ait 2 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Saldırı profili
Tüm kayıtlar
2 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2017-16881İstismar yok | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/symphony project · symphony · CWE-79 | Orta6,1 | — | %0,8 | 18 Kas 2017 |
24İzleyin | CVE-2017-16956İstismar yok | b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter witsymphony project · symphony · CWE-79 | Orta6,1 | — | %0,7 | 27 Kas 2017 |
- CVE-2017-1688124İzleyin
b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/
OrtaCVSS 6,1İstismar yokEPSS %0symphony project · symphony18 Kas 2017
- CVE-2017-1695624İzleyin
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter wit
OrtaCVSS 6,1İstismar yokEPSS %0symphony project · symphony27 Kas 2017