A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/list/. The manipulation of the argument sort leads to basic cross site scripting (Reflected). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.96629 | Permissions Required Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/41184/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
20 Apr 2023, 18:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.exploit-db.com/exploits/41184/ - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://vuldb.com/?id.96629 - Permissions Required, Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:trueconf:server:4.3.7.12219:*:*:*:*:*:*:* |
cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:* |
08 Jul 2022, 18:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:trueconf:server:4.3.7.12219:*:*:*:*:*:*:* cpe:2.3:a:trueconf:server:4.3.7.12255:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 5.4 |
| References | (MISC) https://vuldb.com/?id.96629 - Third Party Advisory | |
| References | (MISC) https://www.exploit-db.com/exploits/41184/ - Third Party Advisory, VDB Entry | |
| CWE | CWE-79 |
29 Jun 2022, 17:45
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-29 17:15
Updated : 2024-02-04 22:29
NVD link : CVE-2017-20115
Mitre link : CVE-2017-20115
CVE.ORG link : CVE-2017-20115
JSON object : View
Products Affected
trueconf
- server