Approved changes feed: RSS · Atom

cpe:2.3:a:inedo:otter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInedo (ad911a6a-e0ab-5099-b98f-f254426f4ed1)
ProductOtter (35612da0-a022-5989-b6e2-5eedcd853992)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17086 vulnerable 2026-06-08 05:09:07.870879 Details available
Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor.
Published: 2017-12-01T08:00:00.000Z
Updated: 2024-08-05T20:43:59.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15607 vulnerable 2026-06-08 05:08:59.015207 Details available
Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
Published: 2017-12-01T08:00:00.000Z
Updated: 2024-08-05T19:57:27.412Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.