VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 30, 2017· Updated Jun 17, 2026

CVE-2017-14198

CVE-2017-14198

Description

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Squiz/Matrix9 versions
    cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*range: <=5.3.6.0
    • cpe:2.3:a:squiz:matrix:5.4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.1.2:*:*:*:*:*:*:*
    • (no CPE)range: <5.3.6.1, <5.4.1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.