CVE-2017-1002152

2019-01-1021:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

46.0%

JSON

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.

CPENameOperatorVersion
bodhieq0.2.0
bodhieq2.1.6
bodhieq2.1.5
bodhieq2.1.8
bodhieq0.4.2
bodhieq0.9.12.1
bodhieq0.9.8
bodhieq0.6.0
bodhieq0.7.7
bodhieq2.1

Name	Operator	Version
bodhi	eq	0.2.0
bodhi	eq	2.1.6
bodhi	eq	2.1.5
bodhi	eq	2.1.8
bodhi	eq	0.4.2
bodhi	eq	0.9.12.1
bodhi	eq	0.9.8
bodhi	eq	0.6.0
bodhi	eq	0.7.7
bodhi	eq	2.1

Rows per page:

1-10 of 791

References

github.com/fedora-infra/bodhi/issues/1740

0.001 Low

EPSS

Percentile

46.0%

JSON

Related for OSV:CVE-2017-1002152