Packagist/movingbytes/social-network CVE-2017-7390: medium 6.1, EPSS 0.64%
SocialNetwork Cross-Site Scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.2.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3fm8-7gpf-p8fm
- https://nvd.nist.gov/vuln/detail/CVE-2017-7390
- https://github.com/andreas83/SocialNetwork/issues/84
- https://github.com/andreas83/SocialNetwork/commit/1b0799d08fda2f3099beaae1234b8b468deb8db1
- https://github.com/andreas83/SocialNetwork
- http://www.securityfocus.com/bid/97312
CVE-2017-7390 · published · modified · JSON