CVE-2017-15639 - tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature

MEDIUM

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature

Published Oct 19, 2017

6.5

MEDIUM

CVSS 3.0

EPSS 6.78%

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature.

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

Link	Providers	Tags
http://www.getmura.com/blog/critical-security-update-for-mura-cms-version-6-1-and-earlier/		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/101603		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/43045/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 19, 2017

Updated Aug 5, 2024

Reserved Oct 19, 2017

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a