PT-2019-12308 · Centos · Centos Web Panel

Dkm · CVE-2019-11429 · Published 2019-05-13 · Updated 2023-01-24

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CentOS Web Panel versions 0.9.8.753 through 0.9.8.807, 0.9.8.793

Description The issue concerns a Reflected XSS vulnerability related to the "Domain" field on the "DNS Functions > Add DNS Zone" screen.

Recommendations For versions 0.9.8.753 through 0.9.8.807, and 0.9.8.793, consider restricting access to the "Add DNS Zone" screen until a fix is available. As a temporary workaround, avoid using the "Domain" field in the "Add DNS Zone" screen to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-11429

Affected Products

Centos Web Panel

References · 5

• 🔥 https://exploit-db.com/exploits/46784 · Exploit
• 🔥 http://packetstormsecurity.com/files/152696/CentOS-Web-Panel-Domain-Field-Cross-Site-Scripting.html · Exploit
• https://centos-webpanel.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11429 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11429 · Vendor Advisory