CVE-2017-18635

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://access.redhat.com/errata/RHSA-2020:0754Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1656435Issue Tracking, Third Party Advisory
https://github.com/ShielderSec/cve-2017-18635Third Party Advisory
https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534Patch, Third Party Advisory
https://github.com/novnc/noVNC/issues/748Patch, Third Party Advisory
https://github.com/novnc/noVNC/releases/tag/v0.6.2Release Notes, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/10/msg00004.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00024.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4522-1/Third Party Advisory
https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/Exploit, Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0754Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1656435Issue Tracking, Third Party Advisory
https://github.com/ShielderSec/cve-2017-18635Third Party Advisory
https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534Patch, Third Party Advisory
https://github.com/novnc/noVNC/issues/748Patch, Third Party Advisory
https://github.com/novnc/noVNC/releases/tag/v0.6.2Release Notes, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/10/msg00004.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00024.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4522-1/Third Party Advisory
https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/Exploit, Third Party Advisory

Timeline

Published: Sep 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-186367.5CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.CVE-2017-186387.5send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint c CVE-2017-186396.1Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parame CVE-2017-186407.5The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.CVE-2017-186418.1In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap cont CVE-2017-186426.5Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse e CVE-2017-186437.5An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is information disclosure of the kbase_context addr CVE-2017-186449.8An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software. There is a muic_set_reg_sel heap-based buffer ov CVE-2017-186459.8An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software. There is a panel_lpm sysfs stack-base CVE-2017-186464.6An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. An attacker can bypass the password requirement for table CVE-2017-186478.1An issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto v1.0 implementation in Secure Driver has a CVE-2017-186489.1An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations