PT-2019-11991 · Heidelberg · Prinect Archive System+1

Published 2019-05-06 · Updated 2019-05-28 · CVE-2019-10685

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Heidelberg Prinect Archiver version 2013 release 1.0 Prinect Archive System 2015 Release 2.6

Description A Reflected Cross Site Scripting (XSS) issue was discovered. This issue allows for the execution of malicious scripts in the context of the affected system, potentially leading to unauthorized actions or data exposure.

Recommendations For Heidelberg Prinect Archiver version 2013 release 1.0, update to a newer version that includes a fix for this issue. For Prinect Archive System 2015 Release 2.6, update to a newer version that includes a fix for this issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-10685

Affected Products

Heidelberg Prinect Archiver

Prinect Archive System

References · 7

• 🔥 https://github.com/alt3kx/CVE-2019-10685 · Exploit
• 🔥 https://medium.com/@alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b · Exploit
• 🔥 https://exploit-db.com/exploits/46804 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10685 · Security Note
• https://medium.com/%40alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b · Note
• https://t.me/defcon_news/13006 · Telegram Post