Lucene search
MitreCVELIST:CVE-2017-10975HistoryJul 06, 2017 - 2:00 p.m.
CVE-2017-10975
2017-07-0614:00:00
mitre
www.cve.org
1
lutim
cross-site scripting
xss
vulnerability
remote attackers
arbitrary web script
html
crafted filename
upload notification
myfiles component
victim
xss payload
EPSS
0.001
Percentile
49.2%
Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in an upload notification and in the myfiles component, if the attacker can convince the victim to proceed with an upload despite the appearance of an XSS payload in the filename.
References
Related
nvd
nvd
CVE-2017-10975
2017-07-06 14:29:00
prion
prion
Cross site scripting
2017-07-06 14:29:00
cve
cve
CVE-2017-10975
2017-07-06 14:29:00