PT-2019-8914 · Adrenalin · Adrenalin 5.4 Hrms

Rishu Ranjan · Publicado 2019-03-25 · Atualizado 2026-03-02 · CVE-2018-12652

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adrenalin 5.4 HRMS Software (affected versions not specified)

Description A Reflected Cross Site Scripting (XSS) issue was discovered. The user-supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "LeaveEmployeeSearch.aspx" API endpoint, specifically through the prntFrmName or prntDDLCntrlName parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-12652

Produtos afetados

Adrenalin 5.4 Hrms

Referências · 5

• 🔥 https://knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html · Exploit
• https://t.me/cveNotify/153784 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2018-12652 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12652 · Nota de Segurança
• https://securethy.com/2019/02/CVE-2018-12652-reflected-XSS.html · Nota