{"id":"CVE-2017-15214","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-15214","generatedAt":"2026-10-28T21:18:51.718Z","title":"Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users (including unauthenticated users), via the name, title, or…","description":"Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users (including unauthenticated users), via the name, title, or id parameter to plugins/dokuwiki/lib/plugins/changelinks/syntax.php.","published":"2017-10-11T01:32:55.000Z","lastModified":"2026-06-17T01:07:23.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["flyspray/flyspray"],"epss":{"score":0.00863,"percentile":0.58413,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://openwall.com/lists/oss-security/2017/10/07/1","tags":["Mailing List","Patch","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://github.com/Flyspray/flyspray/commit/00cfae5661124f9d67ac6733db61b2bfee34dccc","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6","tags":["Release Notes","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2017/10/07/1","tags":["Mailing List","Patch","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Flyspray/flyspray/commit/00cfae5661124f9d67ac6733db61b2bfee34dccc","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6","tags":["Release Notes","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-15214","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}