Skip to content
OpenAdvisories
Unscored CVE-2017-2128 EUVD-2017-11311GHSA-54xj-5h4c-vvhw

Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data.

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Product: Security guide for website operators

Description

Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data.

Affected products

VendorProductAffectedFixed
INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Security guide for website operators All versions —

References