What is GHSA-jj4j-cwgq-fx7g?

GHSA-jj4j-cwgq-fx7g is a security advisory published by GitHub Security Advisories with Medium severity. ViMbAdmin Cross-site Scripting Vulnerabilities

Which CVE IDs does GHSA-jj4j-cwgq-fx7g cover?

GHSA-jj4j-cwgq-fx7g covers the following CVE IDs: CVE-2017-5870. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jj4j-cwgq-fx7g?

GHSA-jj4j-cwgq-fx7g has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-jj4j-cwgq-fx7g?

GHSA-jj4j-cwgq-fx7g affects 1 product, including: composer/opensolutions/vimbadmin:\u003c= 3.0.15.

GHSA-jj4j-cwgq-fx7gMediumCVSS 5.4

ViMbAdmin Cross-site Scripting Vulnerabilities

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 25, 2024

🔗 CVE IDs covered (1)

CVE-2017-5870 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the (3) name parameter to mailbox/add/did/; the (4) goto parameter to alias/add/did/; or the (5) captchatext parameter to auth/lost-password.

🎯 Affected products1

composer/opensolutions/vimbadmin:<= 3.0.15

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-5870
http://www.openwall.com/lists/oss-security/2017/05/03/8
https://web.archive.org/web/20201208133828/https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin
https://github.com/advisories/GHSA-jj4j-cwgq-fx7g