CVE-2017-20178 — LOW (3.1) — White Hats Nepal

Vulnerability Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.8.1 is able to address this issue. The patch is identified as 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Score

3.1

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Codiad	Codiad	2.8.0

Related Weaknesses (CWE)

CWE-200

References

https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5Patch
https://github.com/Codiad/Codiad/pull/974Issue TrackingPatch
https://github.com/Codiad/Codiad/releases/tag/v.2.8.1Release Notes
https://vuldb.com/?ctiid.221498Permissions RequiredThird Party Advisory
https://vuldb.com/?id.221498Third Party Advisory
https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5Patch
https://github.com/Codiad/Codiad/pull/974Issue TrackingPatch
https://github.com/Codiad/Codiad/releases/tag/v.2.8.1Release Notes
https://vuldb.com/?ctiid.221498Permissions RequiredThird Party Advisory
https://vuldb.com/?id.221498Third Party Advisory

FAQ

What is CVE-2017-20178?

CVE-2017-20178 is a vulnerability with a CVSS score of 3.1 (LOW). ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php....

How severe is CVE-2017-20178?

CVE-2017-20178 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-20178?

Check the references section above for vendor advisories and patch information. Affected products include: Codiad Codiad.