CVE-2017-20041

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-1021
• CWE-1021

• http://seclists.org/fulldisclosure/2017/Mar/36Exploit, Mailing List, Third Party Advisory
• https://vuldb.com/?id.98214Exploit, Permissions Required, Third Party Advisory
• http://seclists.org/fulldisclosure/2017/Mar/36Exploit, Mailing List, Third Party Advisory
• https://vuldb.com/?id.98214Exploit, Permissions Required, Third Party Advisory

Published

Jun 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-20036A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2017-20037A vulnerability has been found in SICUNET Access Controller …8.8
• CVE-2017-20038A vulnerability was found in SICUNET Access Controller 0.32-…8.8
• CVE-2017-20039A vulnerability was found in SICUNET Access Controller 0.32-…9.8
• CVE-2017-2004Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-20040A vulnerability was found in SICUNET Access Controller 0.32-…5.5
• CVE-2017-20042A vulnerability has been found in Navetti PricePoint 4.6.0.0…8.8
• CVE-2017-20043A vulnerability was found in Navetti PricePoint 4.6.0.0 and …5.4
• CVE-2017-20044A vulnerability was found in Navetti PricePoint 4.6.0.0. It …5.4
• CVE-2017-20045A vulnerability was found in Navetti PricePoint 4.6.0.0. It …8.8
• CVE-2017-20046Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-20047Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…