Debian/pdns-recursor: medium 6.1
A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing
Action: Upgrade pdns-recursor to 4.0.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.7-1 | - |
Fixed versions
| 4.0.7-1 |
Sources
- osv: DEBIAN-CVE-2017-15092#Debian:13/pdns-recursor
- https://security-tracker.debian.org/tracker/CVE-2017-15092
published · modified · JSON