PT-2018-11094 · Ximdex · Ximdex

Whitehat001 · Publicado 2018-06-13 · Atualizado 2018-08-02 · CVE-2018-12273

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ximdex version 4.0

Description The issue concerns a security problem where the /edit URI in the DMS component is vulnerable to XSS attacks. This can be exploited via the Ciudad or Nombre parameter.

Recommendations For Ximdex version 4.0, consider restricting access to the /edit URI in the DMS component to minimize the risk of exploitation. Avoid using the Ciudad or Nombre parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-12273

Produtos afetados

Ximdex

Referências · 3

• 🔥 https://github.com/XIMDEX/ximdex/issues/149 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12273 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12273 · Aviso do Fabricante