CVE-2017-1000192

9.8 criticalEPSS 0.9%

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
Published: 2017-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cygnux:syspass

References

https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901
https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901

Check your stack JSON