PT-2017-14146
CVE-2017-15687
·
Published
2017-10-23
·
Updated
2017-11-17
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Logitech Media Server versions 7.7.1 through 7.7.6, 7.9.0, 7.9.1
Description
A DOM Based Cross Site Scripting (XSS) issue exists, which can be exploited via a crafted URI.
Recommendations
For versions 7.7.1 through 7.7.6, 7.9.0, 7.9.1, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾