MEDIUM🇬🇧 English

CVE-2017-1000051

CVSS 6.1v3.0pub. 2017-07-17upd. 2026-05-13

Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Xwiki Cryptpad

    APP
    Xwiki
    ≤ 1.1.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Referencje

Powiązane podatności

CVE-2025-51846HIGH8.7ten sam produkt

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly...

CVE-2025-49591HIGH7.4ten sam produkt

CryptPad is a collaboration suite. Prior to version 2025.3.0, enforcement of Two-Factor Authentication (2FA) i...

CVE-2019-15302MEDIUM6.5ten sam produkt

The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Ric...

CVE-2025-49590LOW2.9ten sam produkt

CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to fil...

CVE-2025-24893CRITICAL9.8⚠ KEVPL ✓ten sam vendor

XWiki Platform — niezautoryzowany RCE przez endpoint SolrSearch