What is GHSA-3fm8-7gpf-p8fm?

GHSA-3fm8-7gpf-p8fm is a security advisory published by GitHub Security Advisories with Medium severity. SocialNetwork Cross-Site Scripting (XSS) vulnerability

Which CVE IDs does GHSA-3fm8-7gpf-p8fm cover?

GHSA-3fm8-7gpf-p8fm covers the following CVE IDs: CVE-2017-7390. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3fm8-7gpf-p8fm?

GHSA-3fm8-7gpf-p8fm has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-3fm8-7gpf-p8fm?

GHSA-3fm8-7gpf-p8fm affects 1 product, including: composer/movingbytes/social-network:\u003c= 1.2.1.

GHSA-3fm8-7gpf-p8fmMediumCVSS 6.1

SocialNetwork Cross-Site Scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2017-7390 →

📋 Description

A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/template/pw_forgot.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. A patch for the vulnerability is available at https://github.com/andreas83/SocialNetwork/commit/1b0799d08fda2f3099beaae1234b8b468deb8db1

🎯 Affected products1

composer/movingbytes/social-network:<= 1.2.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2017-7390
https://github.com/andreas83/SocialNetwork/issues/84
http://www.securityfocus.com/bid/97312
https://github.com/andreas83/SocialNetwork/commit/1b0799d08fda2f3099beaae1234b8b468deb8db1
https://github.com/advisories/GHSA-3fm8-7gpf-p8fm