CVE-2017-1000478

2018-01-0318:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

26.2%

JSON

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

CPENameOperatorVersion
elabftweq0.9
elabftweq0.10.0
elabftweq0.8.2
elabftweq1.2.6
elabftweq0.11.0-RC
elabftweq1.2.0-p2
elabftweq0.9.1
elabftweq0.12.0-BETA
elabftweq1.6.2
elabftweq1.0.0-alpha

Name	Operator	Version
elabftw	eq	0.9
elabftw	eq	0.10.0
elabftw	eq	0.8.2
elabftw	eq	1.2.6
elabftw	eq	0.11.0-RC
elabftw	eq	1.2.0-p2
elabftw	eq	0.9.1
elabftw	eq	0.12.0-BETA
elabftw	eq	1.6.2
elabftw	eq	1.0.0-alpha

Rows per page:

1-10 of 911

References

github.com/elabftw/elabftw/issues/531

0.001 Low

EPSS

Percentile

26.2%

JSON

Related for OSV:CVE-2017-1000478