NVD

Id
83416  
Name
CVE-2017-6541  
Description
Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-03-18  
Published
2017-03-08  
Modified Date
2017-03-17  
Seq
2017-6541  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
410027 83416 CVE-2016-9053 http://www.talosintelligence.com/reports/TALOS-2016-0267/  View
410028 83416 CVE-2016-9053 http://www.talosintelligence.com/reports/TALOS-2016-0267/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65763 JVNDB-2017-002102 webpagetest におけるクロスサイトスクリプティングの脆弱性 webpagetest は、webpagetest-master/www/benchmarks/viewtest.php URL に渡されるユーザ提供のデータ (benchmark、time) のフィルタリングが不十分なため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-6541 CVE-2017-6541 83416 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002102.html 2017-03-08 2017-03-28 View