CVE-2018-17574

2018-09-2809:29:00

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.

CPENameOperatorVersion
yapieq1.2.5
yapieq1.3.15
yapieq1.2.7
yapieq1.3.11
yapieq1.3.12
yapieq1.3.6
yapieq1.3.13
yapieq1.3.2
yapieq1.3.22
yapieq1.2.8

Name	Operator	Version
yapi	eq	1.2.5
yapi	eq	1.3.15
yapi	eq	1.2.7
yapi	eq	1.3.11
yapi	eq	1.3.12
yapi	eq	1.3.6
yapi	eq	1.3.13
yapi	eq	1.3.2
yapi	eq	1.3.22
yapi	eq	1.2.8

Rows per page:

1-10 of 341

References

github.com/YMFE/yapi/issues/520