CVE-2017-1000103

2017-10-0501:29:04

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

CPENameOperatorVersion
dry-plugineqdry-2.35
dry-plugineqdry-2.20
dry-plugineqdry-2.15
dry-plugineqdry-2.18
dry-plugineqdry-2.38
dry-plugineqdry-2.43
dry-plugineqdry-2.27
dry-plugineqdry-2.23
dry-plugineqdry-2.24
dry-plugineqdry-2.28

Name	Operator	Version
dry-plugin	eq	dry-2.35
dry-plugin	eq	dry-2.20
dry-plugin	eq	dry-2.15
dry-plugin	eq	dry-2.18
dry-plugin	eq	dry-2.38
dry-plugin	eq	dry-2.43
dry-plugin	eq	dry-2.27
dry-plugin	eq	dry-2.23
dry-plugin	eq	dry-2.24
dry-plugin	eq	dry-2.28