CVE-2017-1000051

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-1000051

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000051.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-1000051

Published

2017-07-17T13:18:17.563Z

Modified

2026-04-10T03:54:35.925840Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content

References

Affected packages

Git / github.com/cryptpad/cryptpad

Affected ranges

Type: GIT
Repo: https://github.com/cryptpad/cryptpad
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

aec781c22f2444717402ba46369ee3496b81c862

Type

GIT

Repo

https://github.com/xwiki-labs/cryptpad

Events

Introduced

Last affected

3619fdc77a72792594e2822044e0ee1451e47fab

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.0"
        }
    ]
}

Affected versions

0.*

0.2.0

0.3.0

1.*

1.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000051.json"