CVE-2017-17714
Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.
CVE-2017-17714
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2017-17714
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://github.com/jofpin/trape",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "628149159ba25adbfc29a3ae1d4b10c7eb936dd3"
}
],
"database_specific": {
"source": "REFERENCES"
}
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17714.json"
}
}
]- Related CVEs
- CVE-2017-17714
Source reference:
/id
Publisher severity
medium
Source reference: /severity/0/score
- Event
- #86005 · Revision 1
- Added to Heist Feed
- Publisher date