PT-2023-10104 · Unknown · Stiiv Contact App

CVE-2014-125034 · Publicado 2023-01-02 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions stiiv contact app (affected versions not specified)

Description A vulnerability has been found in stiiv contact app and classified as problematic. The function render of the file libs/View.php is affected by this issue. The manipulation of the argument var leads to cross site scripting. The attack can be launched remotely.

Recommendations To fix this issue, it is recommended to apply a patch named 67bec33f559da9d41a1b45eb9e992bd8683a7f8c. As a temporary workaround, consider disabling the render function of the libs/View.php file until the patch is applied. Restrict access to the var argument to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-125034

Produtos afetados

Stiiv Contact App

Referências · 6

• https://github.com/stiiv/contact_app/commit/67bec33f559da9d41a1b45eb9e992bd8683a7f8c · Correção
• https://t.me/cvenotify/41107 · Publicação no Telegram
• https://vuldb.com/?ctiid.217183 · Nota
• https://t.me/cibsecurity/55735 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-125034 · Nota de Segurança
• https://vuldb.com/?id.217183 · Nota