CVE-2017-15687

DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-10-23

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Media Server (Logitech)

References

• https://fireshellsecurity.team/assets/pdf/DOM-Based-Cross-Site-Scripting-_XSS_-Logitech-Media-Server.pdf
• https://www.exploit-db.com/exploits/43024/