PT-2019-12340 · Zotonic · Zotonic

Jan-Martin Sijs + 3 · Publicado 2019-04-24 · Atualizado 2019-05-06 · CVE-2019-11504

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zotonic versions prior to 0.47

Description The issue is related to a mod admin XSS in Zotonic.

Recommendations For versions prior to 0.47, update to version 0.47 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-11504

Produtos afetados

Zotonic

Referências · 6

• 🔥 https://exploit-db.com/exploits/46788 · Exploit
• 🔥 http://packetstormsecurity.com/files/152717/Zotonic-0.46-mod_admin-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-11504 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11504 · Nota de Segurança
• http://docs.zotonic.com/en/latest/developer-guide/releasenotes/rel_0.47.0.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11504 · Nota