Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script.
References
Link | Resource |
---|---|
https://framagit.org/luc/lutim/issues/38 | Issue Tracking Patch Third Party Advisory |
https://framagit.org/luc/lutim/commit/4c0df8f8b10122339b908dcd9b1117348b49dcab | Issue Tracking Patch Third Party Advisory |
http://www.securityfocus.com/bid/96855 |
Configurations
Information
Published : 2017-03-14 02:59
Updated : 2017-03-15 18:59
NVD link : CVE-2017-6877
Mitre link : CVE-2017-6877
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
lutim_project
- lutim