PT-2019-13087 · Vanderbilt University · Redcap

Alexandre Zanni + 1 · Publicado 2019-07-11 · Atualizado 2025-03-19 · CVE-2019-13029

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions REDCap versions 8.0.0 through 8.10.19 REDCap versions 9.0.0 through 9.1.1

Description The issue concerns multiple stored Cross-site scripting (XSS) problems in the admin panel and survey system. An attacker can inject arbitrary malicious HTML or JavaScript code into a user's web browser.

Recommendations For REDCap versions 8.0.0 through 8.10.19, update to version 8.10.20 or later. For REDCap versions 9.0.0 through 9.1.1, update to version 9.1.2 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-13029

Produtos afetados

Redcap

Referências · 7

• 🔥 https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2019-13029/REDCap%20Cross%20Site%20Scripting.txt · Exploit
• 🔥 https://exploit-db.com/exploits/47146 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13029 · Nota de Segurança
• http://packetstormsecurity.com/files/153691/REDCap-Cross-Site-Scripting.html · Nota
• https://osv.dev/vulnerability/CVE-2019-13029 · Aviso do Fabricante
• https://gitlab.com/snippets/1874216 · Nota
• https://t.me/cvenotify/115407 · Publicação no Telegram