PatchSiren

PatchSiren cyber security CVE debrief

CVE-2017-6488 Epesi CVE debrief

CVE-2017-6488 is a medium-severity cross-site scripting issue in EPESI 1.8.1.1. User-controlled parameters passed to save_filters.php were not filtered adequately, allowing an attacker to inject HTML or script that executes in a victim's browser in the context of the vulnerable site.

Vendor
Epesi
Product
Unknown
CVSS
MEDIUM 6.1
CISA KEV
Not listed in stored evidence
Original CVE published
2017-03-05
Original CVE updated
2026-05-13
Advisory published
2017-03-05
Advisory updated
2026-05-13

Who should care

EPESI administrators, application security teams, and anyone operating or maintaining EPESI 1.8.1.1 deployments should review this issue, especially if the application is exposed to untrusted users or if links to the affected endpoint can be shared broadly.

Technical summary

NVD describes CVE-2017-6488 as multiple XSS issues in EPESI 1.8.1.1 caused by insufficient filtration of the visible, tab, and cid parameters sent to EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php. The weakness is classified as CWE-79. NVD assigns CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, indicating a network-reachable issue that requires user interaction and can impact confidentiality and integrity through script execution in the browser context.

Defensive priority

Medium. The issue is publicly disclosed and web-facing, but exploitation requires user interaction. Prioritize if EPESI is internet-accessible or handles sensitive user sessions.

Recommended defensive actions

  • Review EPESI deployments for version 1.8.1.1 and confirm whether a vendor fix or patched release is available.
  • Apply the referenced patch or vendor guidance associated with the GitHub issue reference before exposing the affected endpoint to users.
  • Validate that user-supplied parameters such as visible, tab, and cid are properly filtered before use and that any reflected output is safely encoded.
  • Restrict access to the affected application paths where possible until remediation is complete.
  • Monitor for suspicious links or requests targeting save_filters.php and for unexpected script execution symptoms in user sessions.

Evidence notes

This debrief is based on the NVD record for CVE-2017-6488 and the CVE description supplied in the source corpus. The record lists EPESI 1.8.1.1 as vulnerable, identifies CWE-79, and links to a SecurityFocus advisory and a GitHub issue tagged as exploit and patch. No additional claims are made beyond the supplied sources.

Sources and references

Verified primary and authoritative sources

  • CVE-2017-6488 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2017-6488

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2017-6488 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2017-6488

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.