CVE-2017-15717

6.1MEDIUM

Key Information:

Vendor
Apache
Status
Apache Sling
Vendor
CVE Published:
10 January 2018

Summary

A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 and Apache Sling XSS Protection API 2.0.0.

Affected Version(s)

Apache Sling XSS Protection API 1.0.4 to 1.0.18

Apache Sling XSS Protection API Compat 1.1.0

Apache Sling XSS Protection API 2.0.0

References

https://s.apache.org/CVE-2017-15717
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.