PT-2023-11354 · Soerennb · Extplorer

Mario Korth · Publicado 2023-01-05 · Atualizado 2024-05-17 · CVE-2019-25096

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions soerennb eXtplorer versions 2.1.12 and earlier

Description A problem has been found in soerennb eXtplorer that allows for cross-site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component to address this issue.

Recommendations For soerennb eXtplorer versions 2.1.12 and earlier, upgrade to version 2.1.13 to address this issue. As a temporary workaround, consider restricting access to components that may be affected by the cross-site scripting vulnerability until the upgrade is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-25096

Produtos afetados

Extplorer

Referências · 12

• https://github.com/soerennb/extplorer/releases/tag/v2.1.13 · Correção
• https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2019-25096 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-25096 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25096 · Nota
• https://t.me/cibsecurity/55945 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-25096 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-25096 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-25096 · Aviso do Fabricante
• https://vuldb.com/?ctiid.217435 · Nota
• https://t.me/cvenotify/41288 · Publicação no Telegram
• https://vuldb.com/?id.217435 · Nota