VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 6, 2017· Updated Jun 17, 2026

CVE-2017-10975

CVE-2017-10975

Description

Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in an upload notification and in the myfiles component, if the attacker can convince the victim to proceed with an upload despite the appearance of an XSS payload in the filename.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Lutim Project/Lutim2 versions
    cpe:2.3:a:lutim_project:lutim:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:lutim_project:lutim:*:*:*:*:*:*:*:*range: <=0.7.1
    • (no CPE)range: <0.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.