CVE-2017-1002152CWE-94

CVE-2017-1002152: vulnerability in Fedora Project Infrastructure Bodhi

Published · Updated

Follow this CVE+ Monitor Bodhi+ Monitor bodhi

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.
Affected products
Fedora Project Infrastructure · Bodhi