CVE-2017-16821 | BDVDB-2026-92940 Detail

Description#

b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/b3log/symphony/issues/503

Exploit#

No public exploit known

History#

Version 12017-11-15Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.