CVE-2017-10711

In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter

published July 24, 2017

CVSS
—
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Published
2017-07-24T13:00Z
EPSS history
Timeline
  • 24 JUL 13:00Z
    In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter
    cvelistv5