CVE-2017-20178

Low

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.8.1 is able to address this issue. The patch is identified as 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

SeverityLow

CVSS3.1

Exploit probability—

ProductCodiad

PublishedFeb 21, 2023

First seenFeb 21, 2023

Weakness typeCWE-200Sensitive information exposure

How to fix

Update

codiad/codiad2.8.1 or later

Patches

Affected products

Product	Affected versions	Fixed in
codiad codiad	2.8.0	—
codiad/codiadPackagist	v < 2.8.1	2.8.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.