DEBIAN-CVE-2017-15092

DEBIAN-CVE-2017-15092 PUBLISHED CVSS 6.099999904632568 MEDIUM

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.

Risk Scores

CVSS v3.0

6.099999904632568

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
Debian:11	pdns-recursor	0, 0, 0
Debian:14	pdns-recursor	0, 0, 0
Debian:12	pdns-recursor	0, 0, 0
Debian:13	pdns-recursor	0, 0, 0

Timeline

Jan 23, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-15092 advisory

Open in Interactive Console →