CVE-2017-1000442
1 advisory.
Packagist/passbolt/passbolt_api CVE-2017-1000442: medium 5.4, EPSS 0.52%
Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar
Action: Upgrade passbolt/passbolt_api to 1.6.5 or later.
composer require passbolt/passbolt_api:1.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.5 | - |
Fixed versions
| 1.6.5 |
Sources
- osv: GHSA-j2fp-9wp5-mg66
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000442
- https://github.com/passbolt/passbolt_api/commit/f5eb93485a90195439e12aa8072f45ceb37b19c3
- https://github.com/FriendsOfPHP/security-advisories/blob/master/passbolt/passbolt_api/CVE-2017-1000442.yaml
- https://github.com/passbolt/passbolt_api
- https://www.passbolt.com/incidents/20170914_xss_on_resource_urls
- https://www.passbolt.com/release/notes#September
CVE-2017-1000442 · published · modified · JSON