CVE-2019-17488

b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header

published October 10, 2019

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00818 · 56.7th percentile
Published
2019-10-10T20:18Z
EPSS history
Timeline
  • 10 OCT 20:18Z
    b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header
    cvelistv5