CVE-2017-15092CWE-79

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was…

published January 23, 2018

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02275 · 82.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2018-01-23T15:00Z
EPSS history
Timeline
  • 23 JAN 15:00Z
    A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was…
    cvelistv5