[CVE-2018-17150] InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities
bishopfox.com | advisory | CVE-2018-17150 | #xss | #xxe | #authorization | #cache | #vulnerability-advisory | #intersystems
Summary
A Bishop Fox advisory on XSS, XXE and insufficient authorization in InterSystems Cache 2017.2.2.865.0 and 2018.1.2, where stored XSS can escalate privileges and exfiltrate data.
- CVE
- CVE-2018-17150
- Published
- Collected
--- id: 4197 title: "[CVE-2018-17150] InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities" cve: CVE-2018-17150 source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/intersystems-cache-advisory" published_at: "2019-07-24T00:00:00Z" tags: ["xss", "xxe", "authorization", "cache", "vulnerability-advisory", "intersystems"] phying_url: "https://phying.com/item/4197" lang: en --- # [CVE-2018-17150] InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities ## Summary A Bishop Fox advisory on XSS, XXE and insufficient authorization in InterSystems Cache 2017.2.2.865.0 and 2018.1.2, where stored XSS can escalate privileges and exfiltrate data. ## Intelligence Metadata - **Sources:** bishopfox.com - **CVE:** CVE-2018-17150 - **Published:** 2019-07-24T00:00:00Z - **Original:** https://bishopfox.com/blog/intersystems-cache-advisory - **Phying News:** https://phying.com/item/4197