CVE-2017-18635 Cross-Site Scripting in @novnc/novnc
MediumCVSS 6.1
EPSS 4.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novnc @novnc/novnc(npm) | < 0.6.2 | 0.6.2 |
| debian/novnc(Debian:12) | < 1:1.0.0-1 | 1:1.0.0-1 |
| debian/novnc(Debian:14) | < 1:1.0.0-1 | 1:1.0.0-1 |
| debian/novnc(Debian:13) | < 1:1.0.0-1 | 1:1.0.0-1 |
| novnc @novnc/novnc | < 0.6.2 | 0.6.2 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| redhat openstack | = 13 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- bugs.launchpad.net issue-tracking third-party-advisory
- github.com release-notes third-party-advisory
- www.npmjs.com
- snyk.io
- RHSA-2020:0754 third-party-advisory vendor-advisory
- github.com exploit third-party-advisory
- [debian-lts-announce] 20191005 [SECURITY] [DLA 1946-1] novnc security update mailing-list third-party-advisory
- USN-4522-1 third-party-advisory vendor-advisory
- www.shielder.it exploit third-party-advisory
- [debian-lts-announce] 20211228 [SECURITY] [DLA 2854-1] novnc security update mailing-list third-party-advisory
- github.com
- Debian Security Tracker CVE-2017-18635 vendor-advisory