Medium severity5.4NVD Advisory· Published Sep 30, 2017· Updated May 13, 2026
CVE-2017-14923
CVE-2017-14923
Description
Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- openwall.com/lists/oss-security/2017/09/28/11nvdMailing ListPatchThird Party Advisory
- github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786nvdIssue TrackingPatchThird Party Advisory
- github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546bnvdIssue TrackingPatchThird Party Advisory
- github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262bnvdIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.