CVE-2017-17478 Information
Feb 14, 2021
cve
Description
An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7 7.1.8 7.1.9 7.1.10 7.2 7.2.1 and 7.2.2. A user with developer credentials can insert malicious code (up to 64 characters) into a text field in Designer Studio after establishing context. Designer Studio is the developer workbench for Pega Platform. That XSS payload will execute when other developers visit the affected pages.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Reference
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction Required
HIGH
Scope
REQUIRED
Confidentiality Impact
CHANGED
Integrity Impact
LOW
Availability Impact
LOW
Base Score
NONE
Base Severity
4.8
Share on: