CVE-2017-7583
MEDIUMILIAS < 5.2.3 - Cross-Site Scripting via SVG Documents
Title source: llmDescription
ILIAS before 5.2.3 has XSS via SVG documents.
References (4)
Core 4
Core References
Mailing List, Third Party Advisory x_refsource_confirm
http://lists.ilias.de/pipermail/ilias-admins/2017-April/000024.html
Release Notes, Third Party Advisory x_refsource_confirm
https://github.com/ILIAS-eLearning/ILIAS/releases/tag/v5.2.3
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/98733
Patch, Third Party Advisory x_refsource_confirm
https://github.com/ILIAS-eLearning/ILIAS/commit/ac223e9a91ffbdf07358afc4c7713d95732a9979
Scores
CVSS v3
6.1
EPSS
0.0115
EPSS Percentile
63.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
ilias/ilias
< 5.2.2
Published
Apr 07, 2017
Tracked Since
Feb 18, 2026