« Volver al listado

CVE-2017-14197

Estado: ModificadaMedia (6.1)—

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Squiz — Matrix

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-14197",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-11-30T02:29:03.197",
  "references": [
    {
      "url": "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en Squiz Matrix en versiones anteriores a la 5.3.6.1 y en las versiones 5.4.x anteriores a la 5.4.1.3. Existen múltiples problemas de Cross-Site Scripting (XSS) reflejado en los plugins Matrix WYSIWYG."
    }
  ],
  "lastModified": "2026-06-17T01:05:45.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A072E91-8282-4B7B-88A6-C095EE619FC5",
              "versionEndIncluding": "5.3.6.0"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87353502-6E5B-4585-8D05-A4D7F7EE024A"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DC13DDC-2FD0-4DB9-B610-E41C1C1E3B71"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77662713-C823-487A-99A7-A4B6A1C69EC5"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5116B470-D7EA-4A41-A64B-7873EBB3ACD5"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68D53865-6489-4A2B-85F3-23608494AD02"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24B08862-94D5-4B59-A2E0-93BD8CF0CD1B"
            },
            {
              "criteria": "cpe:2.3:a:squiz:matrix:5.4.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0F1AE05-4671-432F-A5DB-AC45D47192B8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}