https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T20:21:11.704498+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-34964 cnvd-2017-34964 2026-10-17T20:21:11.707446+00:00 cnvd-2017-34964 https://cve.radiocsirt.org/vuln/euvd-2026-179084 EUVD-2026-179084 2026-10-17T20:21:11.707478+00:00 EUVD-2026-179084 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16881 fkie_cve-2017-16881 2026-10-17T20:21:11.707493+00:00

b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java.

 https://cve.radiocsirt.org/vuln/ghsa-9jvg-42fv-8hwv GHSA-9jvg-42fv-8hwv 2026-10-17T20:21:11.707521+00:00

b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java.

 https://cve.radiocsirt.org/vuln/gsd-2017-16881 gsd-2017-16881 2026-10-17T20:21:11.707538+00:00 gsd-2017-16881