CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace

• CWE-79

• https://www.passbolt.com/incidents/20170914_xss_on_resource_urlsVendor Advisory
• https://www.passbolt.com/release/notes#SeptemberPatch, Release Notes, Vendor Advisory
• https://www.passbolt.com/incidents/20170914_xss_on_resource_urlsVendor Advisory
• https://www.passbolt.com/release/notes#SeptemberPatch, Release Notes, Vendor Advisory

Published

Jan 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000436Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000437Creolabs Gravity 1.0 contains a stack based buffer overflow …
• CVE-2017-1000438In OMERO 5.3.3 or earlier a user could create an OriginalFil…
• CVE-2017-1000439Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000440Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000441Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000443Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulne…
• CVE-2017-1000444Eleix Openhacker version 0.1.47 is vulnerable to an SQL inje…
• CVE-2017-1000445ImageMagick 7.0.7-1 and older version are vulnerable to null…6.5
• CVE-2017-1000446Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000447Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000448Structured Data Linter versions 2.4.1 and older are vulnerab…