PT-2019-10017 · Twiki · Twiki

Jiawang Zhang · Publicado 2019-03-17 · Atualizado 2019-03-21 · CVE-2018-20212

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: TWiki version 6.0.2

Description: The issue allows cross-site scripting (XSS) via the webs parameter in the bin/statistics endpoint.

Recommendations: For TWiki version 6.0.2, update to a version that fixes this issue to prevent cross-site scripting attacks.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-20212

Produtos afetados

Twiki

Referências · 5

• http://seclists.org/fulldisclosure/2019/Jan/7 · Nota
• http://packetstormsecurity.com/files/151028/TWiki-6.0.2-Cross-Site-Scripting.html · Nota
• https://osv.dev/vulnerability/CVE-2018-20212 · Aviso do Fabricante
• http://twiki.org/cgi-bin/view/Codev/DownloadTWiki · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-20212 · Nota de Segurança