CVE-2017-20026

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-20026

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-20026.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-20026

Published

2022-06-09T23:15:08Z

Modified

2026-08-07T14:53:21Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting (Reflected). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.

References

Affected packages

Git / github.com/humhub/humhub

Affected ranges

Type

GIT

Repo

https://github.com/humhub/humhub

Events

Introduced

Fixed

17b3fc0801f8b8e6f1877eb21fbda534068004b6

Database specific

Show details

{
    "cpe": "cpe:2.3:a:humhub:humhub:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.1.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*

v0.11.0

v0.11.1

v0.11.2

v0.20.0

v0.20.0-beta.1

v0.20.1

v0.9.0

v0.9.0-rc.1

v0.9.0-rc.2

v1.*

v1.0.0-beta.1

v1.0.0-beta.2

v1.1.0-beta.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-20026.json"