CVE-2019-13274

Опубликовано: 27 авг. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.

Ссылки

https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/csvinfo.c
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html
Mailing List
Third Party Advisory
https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/csvinfo.c
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:xymon:xymon:*:*:*:*:*:*:*:*

Версия до 4.3.28 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00248

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2019-13274

CVSS3: 6.1

ubuntu

почти 6 лет назад

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.

CVE-2019-13274

CVSS3: 6.1

debian

почти 6 лет назад

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CG ...

GHSA-23f8-vj3q-65w6

CVSS3: 6.1

github

около 3 лет назад

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.

EPSS

Процентиль: 48%

0.00248

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79