CVE-2017-20178

Katalog CVE

CVSS 7.5 · High EPSS 0,68%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada codiad. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.8.1 is able to address this issue. The patch is identified as 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

21 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,68% peluang dieksploitasi; lebih tinggi dari 51,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5 patch
• https://github.com/Codiad/Codiad/pull/974 issue tracking · patch
• https://vuldb.com/?ctiid.221498 permissions required · advisory pihak ketiga
• https://vuldb.com/?id.221498 advisory pihak ketiga
• https://github.com/Codiad/Codiad/releases/tag/v.2.8.1 release notes