Shaarli Project Shaarli 0.9.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:shaarli_project:shaarli:0.9.1:*:*:*:*:*:*:*

part: a version: 0.9.1 update: *

VendorShaarli Project (144e4e96-be93-5139-a05a-d6f1f4382385)
ProductShaarli (ea845c07-baa1-5818-9305-657b6543282c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/shaarli purl2cpe 2026-06-01 10:14:01.942102
pkg:docker/shaarli/shaarli purl2cpe 2026-06-01 10:14:01.942104
pkg:github/sebsauvage/shaarli purl2cpe 2026-06-01 10:14:01.942106
pkg:github/shaarli/shaarli purl2cpe 2026-06-01 10:14:01.942108
pkg:sourceforge/shaarli purl2cpe 2026-06-01 10:14:01.942109

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15215 vulnerable 2026-06-08 05:08:58.147379 Details available
Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can (for example) take over the admin session or change global settings or add/delete links. It is also possible to execute JavaScript against unauthenticated users.
Published: 2017-10-10T05:00:00.000Z
Updated: 2024-09-16T20:01:14.942Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.