CVE-2017-9071

2017-05-1816:29:00

CWE-79

web.nvd.nist.gov

cve-2017-9071

modx revolution

xss

http host header

cache poisoning

security vulnerability

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

CPENameOperatorVersion
modx:modx_revolutionmodx modx revolutionle2.5.6

CPE	Name	Operator	Version
modx:modx_revolution	modx modx revolution	le	2.5.6

References

citadelo.com/en/2017/04/modx-revolution-cms/

github.com/modxcms/revolution/pull/13426