A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is fb6fae2f8a9b146471450b5b0281046a17d1ac8d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220204.
References
| Link | Resource |
|---|---|
| https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8d | Patch Third Party Advisory |
| https://vuldb.com/?ctiid.220204 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.220204 | Third Party Advisory |
| https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8d | Patch Third Party Advisory |
| https://vuldb.com/?ctiid.220204 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.220204 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8d - Patch, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.220204 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.220204 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
29 Feb 2024, 01:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-06 04:15
Updated : 2024-11-21 03:22
NVD link : CVE-2017-20176
Mitre link : CVE-2017-20176
CVE.ORG link : CVE-2017-20176
JSON object : View
Products Affected
share_on_diaspora_project
- share_on_diaspora
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')