CVE-2017-1002152

CVE-2017-1002152

Vendor Fedora Project Infrastructure

Product Bodhi

Weakness CWE-94 · Code injection

Published January 10, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.

Key dates

02Disclosure timeline

January 10, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-1002152 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2025-21187 Microsoft Power Automate Remote Code Execution Vulnerability CVE-2026-44513 Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components CVE-2025-54997 OpenBao: Privileged Operator May Execute Code on the Underlying Host CVE-2020-5259 Prototype Pollution in Dojox CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability