Cross site scripting

2017-07-2617:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

42.7%

JSON

Cross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file.

CPENameOperatorVersion
webapple3.3.0

CPE	Name	Operator	Version
	webapp	le	3.3.0

References

stash.kopano.io/projects/KWA/repos/filepreviewer/commits/85d2b5c2d27f461bba12e9491fcc4b0d8fde771a

0.001 Low

EPSS

Percentile

42.7%

JSON

Related for PRION:CVE-2017-11666