CVE Feed

    Dashboard / CVE / CVE-2017-7552

    CVE-2017-7552

    A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

    Published:Sep 11, 2017
    Last Modified:Apr 20, 2025
    EPS:Sep 28, 2017
    EPSS Score:0.00389
    CVSS Score:9.8

    Affected Products

    Vendor
    Redhat
    Product
    Mobile Application Platform

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-6841 (CVSS 7.5) — A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limit…
    CVE-2020-1723 (CVSS 6.1) — A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in use…
    CVE-2018-3728 (CVSS 8.8) — hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MA…
    CVE-2017-7554 (CVSS 6.1) — It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker co…
    CVE-2017-7553 (CVSS 6.3) — The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker…
    CVE-2017-15010 (CVSS 7.5) — A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node…
    CVE-2017-1000117 (CVSS 8.8) — A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit …
    CVE-2016-8704 (CVSS 9.8) — An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processi…
    CVE-2016-8705 (CVSS 9.8) — Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing mu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High