CVE-2017-17837

🗓️ 04 Jan 2018 15:00:00Reported by apacheType

Apache DeltaSpike-JSF 1.8.0 XSS injection in windowId handlin

Reporter	Title	Published	Views	Family All 8
RedhatCVE	CVE-2017-17837	8 Jan 201804:23	–	redhatcve
Prion	Cross site scripting	4 Jan 201815:29	–	prion
NVD	CVE-2017-17837	4 Jan 201815:29	–	nvd
OSV	Cross-site Scripting in Apache DeltaSpike	13 May 202201:02	–	osv
OSV	CVE-2017-17837	4 Jan 201815:29	–	osv
Github Security Blog	Cross-site Scripting in Apache DeltaSpike	13 May 202201:02	–	github
CVE	CVE-2017-17837	4 Jan 201815:29	–	cve
Veracode	Cross-site Scripting (XSS)	5 Jan 201808:28	–	veracode

[
  {
    "product": "Apache DeltaSpike",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.0"
      }
    ]
  }
]

Source	Link
git-wip-us	www.git-wip-us.apache.org/repos/asf
lists	www.lists.apache.org/thread.html/r17b326c0eb35d8c71c84c171eda83e3e1f011dc757781e34f2846018%40%3Cdev.deltaspike.apache.org%3E
lists	www.lists.apache.org/thread.html/r78565f0f4ecb4ad32a6c405b45b9ee568dfc4729ba63e7d7cb6adf88%40%3Cdev.deltaspike.apache.org%3E
issues	www.issues.apache.org/jira/browse/DELTASPIKE-1307

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jan 2018 15:00Current

6.2Medium risk

Vulners AI Score6.2

EPSS0.007