PT-2019-13280 · Myt · Myt

Kandemir + 1 · Publicado 2019-07-17 · Atualizado 2019-07-18 · CVE-2019-13346

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MyT version 1.5.1

Description The issue concerns a problem where the username parameter in the User component has XSS.

Recommendations For MyT version 1.5.1, avoid using the username parameter until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-13346

Produtos afetados

Myt

Referências · 3

• 🔥 https://exploit-db.com/exploits/47109 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13346 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13346 · Nota de Segurança