Lucene search
PRIOn knowledge basePRION:CVE-2017-6391HistoryMar 02, 2017 - 6:59 a.m.
Authorization
2017-03-0206:59:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the “admin_console/web/tools/SimpleJWPlayer.php” URL, the “admin_console/web/tools/AkamaiBroadcaster.php” URL, the “admin_console/web/tools/bigRedButton.php” URL, and the “admin_console/web/tools/bigRedButtonPtsPoc.php” URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kaltura_server | eq | <= lynx-12.11.0 |
Related
nvd
nvd
CVE-2017-6391
2017-03-02 06:59:00
osv
osv
CVE-2017-6391
2017-03-02 06:59:00
cvelist
cvelist
CVE-2017-6391
2017-03-02 06:00:00
cve
cve
CVE-2017-6391
2017-03-02 06:59:00
openvas
openvas
Kaltura Server Multiple XSS Vulnerabilities
2017-03-03 00:00:00