CVE-2017-1000478

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial…

published January 3, 2018

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00771 · 55.2th percentile
Published
2018-01-03T18:00Z
EPSS history
Timeline
  • 03 JAN 18:00Z
    ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial…
    cvelistv5