PT-2017-15095
CVE-2017-17911
·
تاريخ النشر
2017-12-26
·
تاريخ التحديث
2018-01-11
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Archon version 3.21 rev-1
Description
The issue concerns an XSS vulnerability in the
referer parameter of an index.php?p=core/contact request, specifically in the contact.php file of the core package.Recommendations
For Archon version 3.21 rev-1, consider restricting access to the
index.php?p=core/contact endpoint until a fix is available, and avoid using the referer parameter in this request to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾