Beveiligingsadvies

CVE-2017-7320

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-03-30 07:00:00

Laatst bijgewerkt 2024-08-05 15:56:36

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service (cookie quota exhaustion), or conduct HTTP Response Splitting attacks with resultant XSS, via an invalid parameter value.

← Alle CVE's bekijken Bekijk op cve.org ↗