Lucene search

K
osvGoogleOSV:CVE-2017-11507
HistoryDec 11, 2017 - 4:29 p.m.

CVE-2017-11507

2017-12-1116:29:00
Google
osv.dev
3

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

41.4%

A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

41.4%