« Volver al listado

CVE-2017-1001001

Estado: ModificadaMedia (5.4)—

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pluxml — Pluxml

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-1001001",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "46fe6300-5254-4a98-9594-a9567bec8179",
      "affectedData": [
        {
          "vendor": "PluXml",
          "product": "PluXml",
          "versions": [
            {
              "status": "affected",
              "version": "before 5.6"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-11-01T17:29:00.227",
  "references": [
    {
      "url": "https://github.com/pluxml/PluXml/issues/253",
      "source": "46fe6300-5254-4a98-9594-a9567bec8179"
    },
    {
      "url": "https://github.com/pluxml/PluXml/issues/253",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges."
    },
    {
      "lang": "es",
      "value": "PluXml versión 5.6 es vulnerable a Cross-Site Scripting (XSS) persistente en la página de creación de artículos, lo que puede dar como resultado un escalado de privilegios."
    }
  ],
  "lastModified": "2026-06-17T00:59:18.730",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pluxml:pluxml:5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBB586C0-F857-4A69-B8B0-A28B07176046"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "46fe6300-5254-4a98-9594-a9567bec8179"
}