CVE-2017-1000478 - ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service

Back Back to CVE browser

MEDIUM

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service

Published Jan 3, 2018

5.4

MEDIUM

CVSS 3.0

EPSS 0.77%

Description

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://github.com/elabftw/elabftw/issues/531
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://github.com/elabftw/elabftw/issues/531		x_refsource_MISCExploitIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 3, 2018

Updated Sep 16, 2024

Reserved Jan 3, 2018

Link CVE-2017-1000478

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-1000478

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-1000478