CVE-2017-1000001

2017-07-1713:18:15

Google

osv.dev

0.001 Low

EPSS

Percentile

39.5%

JSON

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on.

CPENameOperatorVersion
fedmsgeq0.16.2
fedmsgeq0.16.1
fedmsgeq0.6.8
fedmsgeq0.11.0
fedmsgeq0.13.3
fedmsgeq0.17.0
fedmsgeq0.6.5
fedmsgeq0.7.1
fedmsgeq0.7.5
fedmsgeq0.7.3

Name	Operator	Version
fedmsg	eq	0.16.2
fedmsg	eq	0.16.1
fedmsg	eq	0.6.8
fedmsg	eq	0.11.0
fedmsg	eq	0.13.3
fedmsg	eq	0.17.0
fedmsg	eq	0.6.5
fedmsg	eq	0.7.1
fedmsg	eq	0.7.5
fedmsg	eq	0.7.3

Rows per page:

1-10 of 501

References

github.com/fedora-infra/fedmsg/blob/0.18.2/CHANGELOG.rst

0.001 Low

EPSS

Percentile

39.5%

JSON

Related for OSV:CVE-2017-1000001