PT-2019-14923 · Ilch · Ilch

Anandjons · Publicado 2019-09-30 · Atualizado 2019-10-03 · CVE-2019-17045

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ilch version 2.1.22

Description The issue allows for stored XSS attacks through the title, text, or email id in the Jobs Tab.

Recommendations For Ilch version 2.1.22, update to a version that fixes this issue, as using the current version may pose a security risk due to the stored XSS vulnerability in the Jobs Tab.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-17045

Produtos afetados

Ilch

Referências · 3

• 🔥 https://syhack.wordpress.com/2019/09/29/ilch-content-management-system-v-2-1-22-vulnerability-disclosure · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17045 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17045 · Aviso do Fabricante