CVE-2017-8384

MEDIUM · CVSS 6.1 EPSS 0.84%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-05-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-8384

Severity

MEDIUM

CVSS

6.1

EPSS

0.84%

Original NVD Description

Craft CMS before 2.6.2976 allows XSS attacks because an array returned by HttpRequestService::getSegments() and getActionSegments() need not be zero-based. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-8052.