gsd-2017-18635
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2017-18635",
"description": "An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.",
"id": "GSD-2017-18635",
"references": [
"https://www.suse.com/security/cve/CVE-2017-18635.html",
"https://access.redhat.com/errata/RHSA-2020:3247",
"https://access.redhat.com/errata/RHSA-2020:0754",
"https://ubuntu.com/security/CVE-2017-18635",
"https://advisories.mageia.org/CVE-2017-18635.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2017-18635"
],
"details": "An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.",
"id": "GSD-2017-18635",
"modified": "2023-12-13T01:21:11.410301Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-18635",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/novnc/noVNC/issues/748",
"refsource": "MISC",
"url": "https://github.com/novnc/noVNC/issues/748"
},
{
"name": "https://github.com/novnc/noVNC/releases/tag/v0.6.2",
"refsource": "MISC",
"url": "https://github.com/novnc/noVNC/releases/tag/v0.6.2"
},
{
"name": "https://bugs.launchpad.net/horizon/+bug/1656435",
"refsource": "MISC",
"url": "https://bugs.launchpad.net/horizon/+bug/1656435"
},
{
"name": "https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534",
"refsource": "MISC",
"url": "https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534"
},
{
"name": "[debian-lts-announce] 20191005 [SECURITY] [DLA 1946-1] novnc security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html"
},
{
"name": "https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/",
"refsource": "MISC",
"url": "https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/"
},
{
"name": "https://github.com/ShielderSec/cve-2017-18635",
"refsource": "MISC",
"url": "https://github.com/ShielderSec/cve-2017-18635"
},
{
"name": "RHSA-2020:0754",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2020:0754"
},
{
"name": "USN-4522-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4522-1/"
},
{
"name": "[debian-lts-announce] 20211228 [SECURITY] [DLA 2854-1] novnc security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003c0.6.2",
"affected_versions": "All versions before 0.6.2",
"cvss_v2": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"cwe_ids": [
"CWE-1035",
"CWE-79",
"CWE-79",
"CWE-937"
],
"date": "2022-01-04",
"description": "An XSS vulnerability was discovered in noVNC in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.",
"fixed_versions": [
"0.6.2"
],
"identifier": "CVE-2017-18635",
"identifiers": [
"GHSA-49rv-g7w5-m8xx",
"CVE-2017-18635"
],
"not_impacted": "All versions starting from 0.6.2",
"package_slug": "npm/@novnc/novnc",
"pubdate": "2020-08-28",
"solution": "Upgrade to version 0.6.2 or above.",
"title": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2017-18635",
"https://github.com/novnc/noVNC/issues/748",
"https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534",
"https://bugs.launchpad.net/horizon/+bug/1656435",
"https://github.com/novnc/noVNC/releases/tag/v0.6.2",
"https://www.npmjs.com/advisories/1204",
"https://snyk.io/vuln/SNYK-JS-NOVNCNOVNC-469136",
"https://access.redhat.com/errata/RHSA-2020:0754",
"https://github.com/ShielderSec/cve-2017-18635",
"https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html",
"https://usn.ubuntu.com/4522-1/",
"https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/",
"https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html",
"https://github.com/advisories/GHSA-49rv-g7w5-m8xx"
],
"uuid": "20dd7d94-6228-44b4-af19-0e7e39bc59aa"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:novnc:novnc:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "0.6.2",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-18635"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/novnc/noVNC/releases/tag/v0.6.2",
"refsource": "MISC",
"tags": [
"Release Notes",
"Third Party Advisory"
],
"url": "https://github.com/novnc/noVNC/releases/tag/v0.6.2"
},
{
"name": "https://github.com/novnc/noVNC/issues/748",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/novnc/noVNC/issues/748"
},
{
"name": "https://bugs.launchpad.net/horizon/+bug/1656435",
"refsource": "MISC",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugs.launchpad.net/horizon/+bug/1656435"
},
{
"name": "https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534"
},
{
"name": "[debian-lts-announce] 20191005 [SECURITY] [DLA 1946-1] novnc security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html"
},
{
"name": "https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/",
"refsource": "MISC",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/"
},
{
"name": "https://github.com/ShielderSec/cve-2017-18635",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/ShielderSec/cve-2017-18635"
},
{
"name": "RHSA-2020:0754",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0754"
},
{
"name": "USN-4522-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4522-1/"
},
{
"name": "[debian-lts-announce] 20211228 [SECURITY] [DLA 2854-1] novnc security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
},
"lastModifiedDate": "2022-04-06T17:54Z",
"publishedDate": "2019-09-25T23:15Z"
}
}
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.