Lucene search

K
osvGoogleOSV:CVE-2017-15881
HistoryOct 24, 2017 - 10:29 p.m.

CVE-2017-15881

2017-10-2422:29:00
Google
osv.dev
2

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the “content brief” or “content extended” field, a different vulnerability than CVE-2017-15878.

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%