Strix
26.1K

CVE-2017-9145

Unknown

Last modified

CVE-2017-9145 is a vulnerability of currently unknown severity. TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS..

Description

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.

Weakness Enumeration

Affected Software

VendorProductVersions
TikiTikiwiki Cms\/Groupware12.0
TikiTikiwiki Cms\/Groupware12.1
TikiTikiwiki Cms\/Groupware12.2
TikiTikiwiki Cms\/Groupware12.3
TikiTikiwiki Cms\/Groupware12.4
TikiTikiwiki Cms\/Groupware12.5
TikiTikiwiki Cms\/Groupware12.6
TikiTikiwiki Cms\/Groupware12.7
TikiTikiwiki Cms\/Groupware12.8
TikiTikiwiki Cms\/Groupware12.9
TikiTikiwiki Cms\/Groupware13.0
TikiTikiwiki Cms\/Groupware13.1
TikiTikiwiki Cms\/Groupware13.2
TikiTikiwiki Cms\/Groupware14.0
TikiTikiwiki Cms\/Groupware14.1
TikiTikiwiki Cms\/Groupware15.0
TikiTikiwiki Cms\/Groupware15.1
TikiTikiwiki Cms\/Groupware15.2
TikiTikiwiki Cms\/Groupware15.3
TikiTikiwiki Cms\/Groupware15.4
TikiTikiwiki Cms\/Groupware16.0
TikiTikiwiki Cms\/Groupware16.1
TikiTikiwiki Cms\/Groupware16.2

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-9145?
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
How severe is CVE-2017-9145?
Severity scoring for CVE-2017-9145 is pending analysis.
How do I fix CVE-2017-9145?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-9145?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST