PT-2019-13578 · Wustl · Xnat

CVE-2019-14276 · Publicado 2019-10-23 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WUSTL XNAT version 1.7.5.3

Description The issue allows XXE attacks via a POST request body.

Recommendations For version 1.7.5.3, update to a newer version that contains a fix for this issue.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2019-14276

Produtos afetados

Xnat

Referências · 5

• http://senseofsecurity.com.au/research/it-security-advisories.php · Nota
• https://osv.dev/vulnerability/CVE-2019-14276 · Aviso do Fabricante
• https://senseofsecurity.com.au/advisories/SOS-19-001 · Correção
• https://wiki.xnat.org/documentation/getting-started-with-xnat/what-s-new-in-xnat/xnat-1-7-5-4-1-7-5-6-release-notes · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14276 · Nota de Segurança