PT-2019-12340 · Zotonic · Zotonic

Jan-Martin Sijs + 3 · Published 2019-04-24 · Updated 2019-05-06 · CVE-2019-11504

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zotonic versions prior to 0.47

Description The issue is related to a mod admin XSS in Zotonic.

Recommendations For versions prior to 0.47, update to version 0.47 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-11504

Affected Products

Zotonic

References · 6

• 🔥 https://exploit-db.com/exploits/46788 · Exploit
• 🔥 http://packetstormsecurity.com/files/152717/Zotonic-0.46-mod_admin-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-11504 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11504 · Security Note
• http://docs.zotonic.com/en/latest/developer-guide/releasenotes/rel_0.47.0.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11504 · Note