{"schemaVersion":3,"id":"CVE-2017-8899","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The primary cause is the ability to upload an SVG document with a crafted attribute such an onload; however, full path disclosure is required for exploitation.","dates":{"published":"2017-05-11T17:00:00.000Z","modified":"2024-09-17T00:31:12.809Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.1,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.1,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0148,"percentile":0.73692,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.128,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.01352},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01352,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0148,"percentile":0.73692}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.01352,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0148,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0148,"percentile":0.73692}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_24849159E4EF9A80","name":"Exploit Reference (zeroday.insecurity.zone)","source":"reference","url":"http://zeroday.insecurity.zone/exploits/ipb_owned.txt","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_E3C08C56CB0B237A","name":"Exploit Reference (twitter.com)","source":"reference","url":"https://twitter.com/insecurity/status/862154908895780864","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_FFC36EAC38C26BDB","name":"Exploit Reference (twitter.com)","source":"reference","url":"https://twitter.com/sxcurity/status/862284967715381248","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":3,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"invisioncommunity","product":"invision_power_board","name":"invision power board","label":"invision_power_board","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.1.19.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.1.19.2","eol":null,"hubHref":"/vendor/invisioncommunity/invision_power_board"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://zeroday.insecurity.zone/exploits/ipb_owned.txt","label":"zeroday.insecurity.zone/exploits/ipb_owned.txt","hostname":"zeroday.insecurity.zone","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://twitter.com/insecurity/status/862154908895780864","label":"twitter.com/insecurity/status/862154908895780864","hostname":"twitter.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://twitter.com/sxcurity/status/862284967715381248","label":"twitter.com/sxcurity/status/862284967715381248","hostname":"twitter.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-05-11T17:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T00:31:12.809Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":43,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T07:24:23.125Z","stale":false,"partial":false}}