PT-2019-13198 · Alkacon · Opencms

Publicado 2019-08-27 · Atualizado 2019-11-12 · CVE-2019-13236

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Alkacon OpenCms versions 10.5.4 through 10.5.5

Description The issue concerns multiple Reflected and Stored XSS problems in the management interface of the system.

Recommendations For versions 10.5.4 and 10.5.5, update to a version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-13236

GHSA-7QQR-3PJ3-Q2F5

Produtos afetados

Opencms

Referências · 8

• 🔥 https://aetsu.github.io/OpenCms · Exploit
• 🔥 https://exploit-db.com/exploits/47339 · Exploit
• https://github.com/alkacon/opencms-core/commits/branch_10_5_x · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2019-13236 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-7qqr-3pj3-q2f5 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-13236 · Aviso do Fabricante
• http://packetstormsecurity.com/files/154283/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.html · Nota
• https://twitter.com/aetsu/status/1152096227938459648 · Nota