CVE-2017-9306

2017-05-3104:29:00

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

JSON

inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an “<svg/onload=” substring instead of an “<svg onload=” substring.

CPENameOperatorVersion
syspasseq2.0.0.17012701-RC1
syspasseq1.2.0.12
syspasseq1.2.0.04-rc4
syspasseq1.1.2.18
syspasseq2.0.0.17021302
syspasseq2.0.0.17012601-beta
syspasseq2.1.1.17030601
syspasseq1.2.0.06
syspasseq1.2.0.19
syspasseq1.1.2.23

Name	Operator	Version
syspass	eq	2.0.0.17012701-RC1
syspass	eq	1.2.0.12
syspass	eq	1.2.0.04-rc4
syspass	eq	1.1.2.18
syspass	eq	2.0.0.17021302
syspass	eq	2.0.0.17012601-beta
syspass	eq	2.1.1.17030601
syspass	eq	1.2.0.06
syspass	eq	1.2.0.19
syspass	eq	1.1.2.23

Rows per page:

1-10 of 731

References

www.cdxy.me/?p=763