VDB

GCVE-110-MAGEIA-2017-48

GCVE-110-MAGEIA-2017-48
Advisory Published
Vulnetix · Advisory published February 18, 2017
Thomas Gerbet discovered that viewvc, a web interface for CVS and Subversion repositories, did not properly sanitize user input. This problem resulted in a potential Cross-Site Scripting vulnerability (CVE-2017-5938). The viewvc package has been updated to version 1.1.26 which fixes this issue.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiadjvulibre0 (affected), 3.5.27-2.1.mga6 (unaffected)—
Mageiaviewvc0 (affected), 1.1.26-1.mga5 (unaffected), 0 (affected), 1.1.26-1.mga5 (unaffected)—

Aliases

CVE-2017-5938

References

Updated viewvc packages fix security vulnerability
advisory
Updated viewvc packages fix security vulnerability
issue
Updated viewvc packages fix security vulnerability
advisory
Updated djvulibre packages enable TIFF output format
advisory
Updated djvulibre packages enable TIFF output format
issue

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›