PT-2017-14512
CVE-2017-16665
·
تاريخ النشر
2017-11-08
·
تاريخ التحديث
2017-11-27
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
RemObjects Remoting SDK for Delphi version 9 1.0.0.0
Description
The issue allows for a reflected Cross Site Scripting (XSS) attack. This is achieved via the
service parameter to the "/soap" URI, which triggers an invalid attempt to generate WSDL.Recommendations
For version 9 1.0.0.0, consider restricting access to the "/soap" URI to minimize the risk of exploitation. As a temporary workaround, avoid using the
service parameter in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾