CVE-2017-17794

2017-12-2009:29:01

Google

osv.dev

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field.

CPENameOperatorVersion
blogotexteq3.7.0
blogotexteq3.7.2
blogotexteq3.7.6
blogotexteq3.7.5
blogotexteq3.0.0
blogotexteq3.4.8
blogotexteq3.0.0-pre
blogotexteq3.1.0
blogotexteq3.7.3
blogotexteq3.4.7

Name	Operator	Version
blogotext	eq	3.7.0
blogotext	eq	3.7.2
blogotext	eq	3.7.6
blogotext	eq	3.7.5
blogotext	eq	3.0.0
blogotext	eq	3.4.8
blogotext	eq	3.0.0-pre
blogotext	eq	3.1.0
blogotext	eq	3.7.3
blogotext	eq	3.4.7