CVE-2017-20178

low-risk
Published 2023-02-21

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.8.1 is able to address this issue. The patch is identified as 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Do I need to act?

-
0.29% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.1/10 Low
NETWORK / HIGH complexity

Affected Products (1)

Affected Vendors

Codiad

References (10)

Patch https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5
Issue Tracking https://github.com/Codiad/Codiad/pull/974
Release Notes https://github.com/Codiad/Codiad/releases/tag/v.2.8.1
Permissions Required https://vuldb.com/?ctiid.221498
Third Party Advisory https://vuldb.com/?id.221498
Patch https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5
Issue Tracking https://github.com/Codiad/Codiad/pull/974
Release Notes https://github.com/Codiad/Codiad/releases/tag/v.2.8.1
Permissions Required https://vuldb.com/?ctiid.221498
Third Party Advisory https://vuldb.com/?id.221498
17
/ 100
low-risk
Severity 11/34 · Low
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal