CVE-2017-1000507 - Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code

Back Back to CVE browser

MEDIUM

Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code

Published Feb 9, 2018

5.4

MEDIUM

CVSS 3.0

EPSS 0.77%

Description

Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3287
Advisory
https://github.com/advisories/GHSA-94hc-7qc9-34rf
Advisory
https://github.com/austintoddj/canvas/issues/359
https://github.com/cnvs/canvas/issues/359
x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000507

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3287		Advisory
https://github.com/advisories/GHSA-94hc-7qc9-34rf		Advisory
https://github.com/austintoddj/canvas/issues/359
https://github.com/cnvs/canvas/issues/359		x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000507