CVE-2017-12097

An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability.

• CWE-79

• http://www.securityfocus.com/bid/102484Broken Link, Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/102484Broken Link, Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449Exploit, Third Party Advisory

Published

Jan 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12091Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-12092An exploitable file write vulnerability exists in the memory…3.7
• CVE-2017-12093An exploitable insufficient resource pool vulnerability exis…5.3
• CVE-2017-12094An exploitable vulnerability exists in the WiFi Channel pars…7.4
• CVE-2017-12095An exploitable vulnerability exists in the WiFi Access Point…6.5
• CVE-2017-12096An exploitable vulnerability exists in the WiFi management o…6.5
• CVE-2017-12098An exploitable cross site scripting (XSS) vulnerability exis…6.1
• CVE-2017-12099An exploitable integer overflow exists in the upgrade of the…7.8
• CVE-2017-1210IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 a…
• CVE-2017-12100An exploitable integer overflow exists in the 'multires_load…7.8
• CVE-2017-12101An exploitable integer overflow exists in the 'modifier_mdef…7.8
• CVE-2017-12102An exploitable integer overflow exists in the way that the B…7.8