PT-2019-12308 · Centos · Centos Web Panel

Dkm · Publicado 2019-05-13 · Atualizado 2023-01-24 · CVE-2019-11429

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CentOS Web Panel versions 0.9.8.753 through 0.9.8.807, 0.9.8.793

Description The issue concerns a Reflected XSS vulnerability related to the "Domain" field on the "DNS Functions > Add DNS Zone" screen.

Recommendations For versions 0.9.8.753 through 0.9.8.807, and 0.9.8.793, consider restricting access to the "Add DNS Zone" screen until a fix is available. As a temporary workaround, avoid using the "Domain" field in the "Add DNS Zone" screen to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-11429

Produtos afetados

Centos Web Panel

Referências · 5

• 🔥 https://exploit-db.com/exploits/46784 · Exploit
• 🔥 http://packetstormsecurity.com/files/152696/CentOS-Web-Panel-Domain-Field-Cross-Site-Scripting.html · Exploit
• https://centos-webpanel.com · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11429 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-11429 · Aviso do Fabricante