PT-2019-14024 · Flightpath · Flightpath

Publicado 2019-08-20 · Atualizado 2019-08-28 · CVE-2019-15227

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FlightPath version 4.8.3

Description The issue affects the Content, Edit urgent message, and Users sections of the Admin Console, where an XSS attack could occur, potentially leading to cookie stealing and other malicious actions.

Recommendations For FlightPath version 4.8.3, update to a newer version that contains a fix for this issue to prevent XSS attacks in the Admin Console sections.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-15227

Produtos afetados

Flightpath

Referências · 3

• 🔥 https://sevenlayers.com/index.php/236-flightpath-4-8-3-xss · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15227 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-15227 · Aviso do Fabricante