PT-2019-13578 · Wustl · Xnat

Published 2019-10-23 · Updated 2024-02-14 · CVE-2019-14276

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WUSTL XNAT version 1.7.5.3

Description The issue allows XXE attacks via a POST request body.

Recommendations For version 1.7.5.3, update to a newer version that contains a fix for this issue.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2019-14276

Affected Products

Xnat

References · 5

• https://osv.dev/vulnerability/CVE-2019-14276 · Vendor Advisory
• https://senseofsecurity.com.au/advisories/SOS-19-001 · Patch
• https://wiki.xnat.org/documentation/getting-started-with-xnat/what-s-new-in-xnat/xnat-1-7-5-4-1-7-5-6-release-notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14276 · Security Note
• http://senseofsecurity.com.au/research/it-security-advisories.php · Note