CVE-2017-7554 It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App...
MediumCVSS 6.1
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat mobile application platform | = 4.4 | No fix listed |
References
- RHSA-2017:2674 vendor-advisory
- RHSA-2017:2675 vendor-advisory
- bugzilla.redhat.com issue-tracking patch vdb-entry vendor-advisory