PT-2019-8778 · Mautic · Mautic

Joanbono · Publicado 2019-09-20 · Atualizado 2021-01-19 · CVE-2018-11200

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mautic versions 2.11.0 and earlier Mautic version 2.13.1

Description An issue was discovered that allows for Stored XSS via the company name field. This Cross Site Scripting (XSS) vulnerability can result in denial of service and execution of javascript code.

Recommendations For Mautic versions 2.11.0 and earlier, update to 2.14.0 or later. For Mautic version 2.13.1, update to 2.14.0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-11200

GHSA-9HX7-RG7W-XM79

Produtos afetados

Mautic

Referências · 5

• https://github.com/mautic/mautic/releases/tag/2.14.0 · Nota
• https://github.com/mautic/mautic/security/advisories/GHSA-9hx7-rg7w-xm79 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11200 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-9hx7-rg7w-xm79 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-11200 · Aviso do Fabricante