CVE-2017-16950 Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
MediumCVSS 6.1
EPSS 0.77%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| urbackup server | < 2.1.20 | 2.1.20 |
References
- www.urbackup.org release-notes vendor-advisory
- www.urbackup.org release-notes vendor-advisory