PT-2019-18132 · Wso2 · Wso2 Dashboard Server

Publicado 2019-05-14 · Atualizado 2019-05-14 · CVE-2019-6514

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WSO2 Dashboard Server version 2.0.0

Description An issue was discovered that allows injection of a JavaScript payload, which will be stored in the database and then displayed and executed on the same page.

Recommendations For WSO2 Dashboard Server version 2.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-6514

Produtos afetados

Wso2 Dashboard Server

Referências · 5

• https://wso2.com/security-patch-releases/dashboard-server · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6514 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6514 · Nota de Segurança
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6514 · Nota
• https://excellium-services.com/cert-xlm-advisory · Nota