CVE-2017-15092

2018-01-2315:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

41.2%

JSON

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.

OSVersionArchitecturePackageVersionFilename
Debian12allpdns-recursor< 4.0.7-1pdns-recursor_4.0.7-1_all.deb
Debian11allpdns-recursor< 4.0.7-1pdns-recursor_4.0.7-1_all.deb
Debian10allpdns-recursor< 4.0.7-1pdns-recursor_4.0.7-1_all.deb
Debian999allpdns-recursor< 4.0.7-1pdns-recursor_4.0.7-1_all.deb
Debian13allpdns-recursor< 4.0.7-1pdns-recursor_4.0.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pdns-recursor	< 4.0.7-1	pdns-recursor_4.0.7-1_all.deb
Debian	11	all	pdns-recursor	< 4.0.7-1	pdns-recursor_4.0.7-1_all.deb
Debian	10	all	pdns-recursor	< 4.0.7-1	pdns-recursor_4.0.7-1_all.deb
Debian	999	all	pdns-recursor	< 4.0.7-1	pdns-recursor_4.0.7-1_all.deb
Debian	13	all	pdns-recursor	< 4.0.7-1	pdns-recursor_4.0.7-1_all.deb

0.001 Low

EPSS

Percentile

41.2%

JSON

Related for DEBIANCVE:CVE-2017-15092