Symphony Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Symphony Project records in CISA KEV

No Symphony Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Symphony 2 records LOW

Records

2 records in Symphony · all components

TI-2017-12488 CVE-2017-16956 · GHSA-x6vj-q2p5-mvjj

b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a…

LOW 29

b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00745 Published 2017-11-27 No fix listed CWE-79

TI-2017-12426 CVE-2017-16881 · GHSA-9jvg-42fv-8hwv

b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as…

LOW 29

b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.jav…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00819 Published 2017-11-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0