Lucene search
PRIOn knowledge basePRION:CVE-2017-11195HistoryJul 12, 2017 - 8:29 p.m.
Cross site scripting
2017-07-1220:29:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
40.0%
Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can use javascript: or data: to abuse this.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pulse_connect_secure | eq | 8.3.0-r1.0 |
Related
cve
cve
CVE-2017-11195
2017-07-12 20:29:00
nvd
nvd
CVE-2017-11195
2017-07-12 20:29:00
cvelist
cvelist
CVE-2017-11195
2017-07-12 20:00:00