Lucene search

GoogleOSV:CVE-2017-20179

HistoryFeb 21, 2023 - 9:15 p.m.

CVE-2017-20179

2023-02-2121:15:10

Google

osv.dev

instedd pollit

vulnerability

critical

tourcontroller

remote attack

upgrade

patch

vdb-221507

software

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tour_controller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able to address this issue. The patch is named 6ef04f8b5972d5f16f8b86f8b53f62fac68d5498. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221507.

CPENameOperatorVersion
polliteq1.0.10
polliteq1.0.2
polliteq1.0.5
polliteq1.2.3
polliteq2.0
polliteq2.3-pre1
polliteq1.2.2
polliteq2.3
polliteq1.2.1
polliteq2.3-pre5

Name	Operator	Version
pollit	eq	1.0.10
pollit	eq	1.0.2
pollit	eq	1.0.5
pollit	eq	1.2.3
pollit	eq	2.0
pollit	eq	2.3-pre1
pollit	eq	1.2.2
pollit	eq	2.3
pollit	eq	1.2.1
pollit	eq	2.3-pre5

Rows per page:

1-10 of 291

References

github.com/instedd/pollit/commit/6ef04f8b5972d5f16f8b86f8b53f62fac68d5498

github.com/instedd/pollit/releases/tag/2.3.2

vuldb.com/?ctiid.221507

vuldb.com/?id.221507

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Related for OSV:CVE-2017-20179