CVE-2016-9889 - Vulnerability Details

Vendors	Products
Tiki	Tikiwiki Cms\/groupware

Link	Providers
http://www.securityfocus.com/bid/95083
http://www.securitytracker.com/id/1037531
https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-12-22T00:00:00", "descriptions": [{"lang": "en", "value": "Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-26T09:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "95083", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/95083"}, {"name": "1037531", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1037531"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-9889", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "95083", "refsource": "BID", "url": "http://www.securityfocus.com/bid/95083"}, {"name": "1037531", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1037531"}, {"name": "https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released", "refsource": "CONFIRM", "url": "https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T03:07:30.869Z"}, "title": "CVE Program Container", "references": [{"name": "95083", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/95083"}, {"name": "1037531", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1037531"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-9889", "datePublished": "2016-12-23T05:00:00", "dateReserved": "2016-12-07T00:00:00", "dateUpdated": "2024-08-06T03:07:30.869Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-12-22T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-07-26T09:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

name : 95083 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/95083 (string)

}

1 : { »

name : 1037531 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1037531 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2016-9889 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 95083 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/95083 (string)

}

1 : { »

name : 1037531 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1037531 (string)

}

2 : { »

name : https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released (string)

refsource : CONFIRM (string)

url : https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T03:07:30.869Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 95083 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/95083 (string)

}

1 : { »

name : 1037531 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1037531 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2016-9889 (string)

datePublished : 2016-12-23T05:00:00 (string)

dateReserved : 2016-12-07T00:00:00 (string)

dateUpdated : 2024-08-06T03:07:30.869Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.0:*:*:*:*:*:*:*", "matchCriteriaId": "A7A6F598-D08E-4678-BDC8-ED54AC8CFD82", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.1:*:*:*:*:*:*:*", "matchCriteriaId": "322FA36F-E1E4-4502-87E0-996109A62B71", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.2:*:*:*:*:*:*:*", "matchCriteriaId": "9D47BD31-97FC-4852-88D1-8658AB4C42A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.3:*:*:*:*:*:*:*", "matchCriteriaId": "0AE735FE-550A-4B8D-A5D1-7D75B03754E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.4:*:*:*:*:*:*:*", "matchCriteriaId": "BCEC2B4E-E288-4D5E-983F-6FD52F84635F", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.5:*:*:*:*:*:*:*", "matchCriteriaId": "8A45E65C-6162-4640-9B6E-F684086C88BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.6:*:*:*:*:*:*:*", "matchCriteriaId": "D55AAF44-F281-4947-B077-ADDC11728036", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.7:*:*:*:*:*:*:*", "matchCriteriaId": "56F231E7-D1D8-4BD7-99F8-2289A88E7A5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.8:*:*:*:*:*:*:*", "matchCriteriaId": "A092086B-1CD1-422E-9A0F-87D2D04037A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.9:*:lts:*:*:*:*:*", "matchCriteriaId": "EA5ED475-1724-47C1-8827-1AC36BB98660", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.0:*:*:*:*:*:*:*", "matchCriteriaId": "4FDC15BB-00E6-4540-8406-F0AA9C5E9178", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.1:*:*:*:*:*:*:*", "matchCriteriaId": "EBC4E1B6-E1E9-41D6-98B0-F2976D408D8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.2:*:*:*:*:*:*:*", "matchCriteriaId": "F88EB9F2-F9C5-4BB7-9C29-74049BB7C2DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.0:*:*:*:*:*:*:*", "matchCriteriaId": "2CE0E547-2EF3-4FD8-BBC3-1EE0CFE505E1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS."}, {"lang": "es", "value": "Algunas formas con el par\u00e1metro geo_zoomlevel_to_found_location en Tiki Wiki CMS 12.x en versiones anteriores a 12.10 LTS, 15.x en versiones anteriores a 15.3 LTS y 16.x en versiones anteriores a 16.1 no tienen la entrada desinfectada, relacionada con tiki-setup.php y article_image.php. El impacto es XSS"}], "id": "CVE-2016-9889", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-12-23T05:59:00.720", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/95083"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id/1037531"}, {"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/95083"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1037531"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A7A6F598-D08E-4678-BDC8-ED54AC8CFD82 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 322FA36F-E1E4-4502-87E0-996109A62B71 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9D47BD31-97FC-4852-88D1-8658AB4C42A3 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 0AE735FE-550A-4B8D-A5D1-7D75B03754E9 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.4:*:*:*:*:*:*:* (string)

matchCriteriaId : BCEC2B4E-E288-4D5E-983F-6FD52F84635F (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 8A45E65C-6162-4640-9B6E-F684086C88BE (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.6:*:*:*:*:*:*:* (string)

matchCriteriaId : D55AAF44-F281-4947-B077-ADDC11728036 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 56F231E7-D1D8-4BD7-99F8-2289A88E7A5C (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.8:*:*:*:*:*:*:* (string)

matchCriteriaId : A092086B-1CD1-422E-9A0F-87D2D04037A6 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.9:*:lts:*:*:*:*:* (string)

matchCriteriaId : EA5ED475-1724-47C1-8827-1AC36BB98660 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:15.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4FDC15BB-00E6-4540-8406-F0AA9C5E9178 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:15.1:*:*:*:*:*:*:* (string)

matchCriteriaId : EBC4E1B6-E1E9-41D6-98B0-F2976D408D8F (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:15.2:*:*:*:*:*:*:* (string)

matchCriteriaId : F88EB9F2-F9C5-4BB7-9C29-74049BB7C2DC (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:tiki:tikiwiki_cms\/groupware:16.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CE0E547-2EF3-4FD8-BBC3-1EE0CFE505E1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS. (string)

}

1 : { »

lang : es (string)

value : Algunas formas con el parámetro geo_zoomlevel_to_found_location en Tiki Wiki CMS 12.x en versiones anteriores a 12.10 LTS, 15.x en versiones anteriores a 15.3 LTS y 16.x en versiones anteriores a 16.1 no tienen la entrada desinfectada, relacionada con tiki-setup.php y article_image.php. El impacto es XSS (string)

}

]

id : CVE-2016-9889 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-12-23T05:59:00.720 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/95083 (string)

}

1 : { »

source : cve@mitre.org (string)

url : http://www.securitytracker.com/id/1037531 (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

1 : Vendor Advisory (string)

]

url : https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/95083 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securitytracker.com/id/1037531 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Release Notes (string)

1 : Vendor Advisory (string)

]

url : https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object