CVE-2017-1000164

2017-11-1705:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation

CPENameOperatorVersion
tine-2.0-open-source-groupware-and-crmeq2012-03-beta1-1
tine-2.0-open-source-groupware-and-crmeq2014.09.6
tine-2.0-open-source-groupware-and-crmeq2012-03-beta2-1
tine-2.0-open-source-groupware-and-crmeq2011-05-5
tine-2.0-open-source-groupware-and-crmeq2017.02.1
tine-2.0-open-source-groupware-and-crmeq2012-03-alpha2-2
tine-2.0-open-source-groupware-and-crmeq2013.10.6
tine-2.0-open-source-groupware-and-crmeq2013.03.1-beta1
tine-2.0-open-source-groupware-and-crmeq2013.10.1-rc1
tine-2.0-open-source-groupware-and-crmeq2013.10.3

Name	Operator	Version
tine-2.0-open-source-groupware-and-crm	eq	2012-03-beta1-1
tine-2.0-open-source-groupware-and-crm	eq	2014.09.6
tine-2.0-open-source-groupware-and-crm	eq	2012-03-beta2-1
tine-2.0-open-source-groupware-and-crm	eq	2011-05-5
tine-2.0-open-source-groupware-and-crm	eq	2017.02.1
tine-2.0-open-source-groupware-and-crm	eq	2012-03-alpha2-2
tine-2.0-open-source-groupware-and-crm	eq	2013.10.6
tine-2.0-open-source-groupware-and-crm	eq	2013.03.1-beta1
tine-2.0-open-source-groupware-and-crm	eq	2013.10.1-rc1
tine-2.0-open-source-groupware-and-crm	eq	2013.10.3

Rows per page:

1-10 of 821

References

forge.tine20.org/view.php?id=13228