PT-2023-10109 · Unknown · Kkokko Neoxplora

CVE-2014-125039 · Publicado 2023-01-04 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions kkokko NeoXplora (affected versions not specified)

Description A problematic issue has been found in the component Trainer Handler of kkokko NeoXplora, leading to cross site scripting. The manipulation can be launched remotely.

Recommendations To fix this issue, it is recommended to apply a patch with the name dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6. As a temporary workaround, consider restricting access to the Trainer Handler component until a patch is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-125039

Produtos afetados

Kkokko Neoxplora

Referências · 6

• https://github.com/kkokko/NeoXplora/commit/dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6 · Correção
• https://vuldb.com/?id.217352 · Nota
• https://vuldb.com/?ctiid.217352 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-125039 · Nota de Segurança
• https://t.me/cibsecurity/55852 · Publicação no Telegram
• https://t.me/cvenotify/41690 · Publicação no Telegram