Vulnerabilities > CVE-2017-20159 - Unspecified vulnerability in Keynote Project Keynote

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

keynote-project

NVD

Published: 2022-12-31

Updated: 2024-11-21

Summary

A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as 05be4356b0a6ca7de48da926a9b997beb5ffeb4a. It is recommended to upgrade the affected component. VDB-217142 is the identifier assigned to this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Keynote_Project Keynote Project Keynote 0.0.1 Keynote Project Keynote 0.1.0 Keynote Project Keynote 0.1.1 Keynote Project Keynote 0.1.2 Keynote Project Keynote 0.1.3 Keynote Project Keynote 0.2.0 Keynote Project Keynote 0.2.1 Keynote Project Keynote 0.2.2 Keynote Project Keynote 0.2.3 Keynote Project Keynote 0.3.0 Keynote Project Keynote 0.3.1	14

Summary

Vulnerable Configurations

References