Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dangoscomb

#46689of 53,624
5.4Total CVSS
Vulnerabilities · 1
PT-2022-8300
5.4
2022-12-27
Unknown · Ytti Oxidized Web · CVE-2019-25088
**Name of the Vulnerable Software and Affected Versions** ytti Oxidized Web (affected versions not specified) **Description** A vulnerability was found in ytti Oxidized Web, classified as problematic. The issue affects an unknown function of the file lib/oxidized/web/views/conf search.haml. The manipulation of the argument `to research` leads to cross-site scripting. It is possible to launch the attack remotely. **Recommendations** To fix this issue, it is recommended to apply a patch. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. As a temporary workaround, consider restricting access to the vulnerable file lib/oxidized/web/views/conf search.haml until a patch is applied. Avoid using the argument `to research` in the affected function until the issue is resolved.