Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Miaochiahao

#43820of 53,632
6.1Total CVSS
Vulnerabilities · 1
PT-2019-13499
6.1
2019-07-19
Antsword · Antsword · CVE-2019-13970
**Name of the Vulnerable Software and Affected Versions** antSword versions prior to 2.1.0 **Description** The issue is related to self-XSS in the database configuration, which can lead to code execution. This is possible via files such as `modules/database/asp/index.js`, `modules/database/custom/index.js`, `modules/database/index.js`, or `modules/database/php/index.js`. **Recommendations** For versions prior to 2.1.0, update to version 2.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the database configuration to minimize the risk of exploitation.