Is CVE-2017-5515 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-5515 being exploited in the wild.

How severe is CVE-2017-5515?

Medium severity, with a CVSS score of 5.4, published 17 January 2017.

Which products and versions are affected?

GeniXCMS GeniXCMS through 0.0.8.

Is there a fix for CVE-2017-5515?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2017-5515 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2017-5515?

Check whether you run Metalgenix Genixcms. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-5515: GeniXCMS cross-site scripting in user prompt function

CVE-2017-5515 · Severity: medium · CVSS 5.4 · Published 2017-01-17

GeniXCMS, a content management system used for building websites, contains a security flaw in its user prompt functionality. An authenticated user can inject malicious scripts that execute in the browsers of other users, potentially leading to unauthorized actions or the theft of sensitive session information. This could compromise the integrity of the website and the security of its visitors.

Technologies: Metalgenix Genixcms. Vendors: Metalgenix.

Quick answers

Is CVE-2017-5515 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-5515 being exploited in the wild.
How severe is CVE-2017-5515?: Medium severity, with a CVSS score of 5.4, published 17 January 2017.
Which products and versions are affected?: GeniXCMS GeniXCMS through 0.0.8.
Is there a fix for CVE-2017-5515?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2017-5515 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2017-5515?: Check whether you run Metalgenix Genixcms. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stored cross-site scripting (XSS) vulnerability exists in GeniXCMS versions up to and including 0.0.8. The flaw is located within the user prompt function, where the application fails to properly neutralize user-supplied input in tag names. A remote authenticated attacker can exploit this by injecting malicious JavaScript or HTML. When other users interact with the affected prompt, the script executes in their browser context. This can lead to session hijacking, unauthorized administrative actions, or defacement of the web interface. A patch was referenced in historical issue tracking, though the original repository link is now inactive.

Affected products

GeniXCMS GeniXCMS through 0.0.8

Timeline

2017-01-17: disclosed
2017-01-17: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.