PT-2019-17941 · Remise · Remise Payment Module

Published 2019-12-26 · Updated 2020-01-06 · CVE-2019-6016

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions REMISE Payment Module versions 3.0.12 and earlier REMISE Payment Module versions 2.11 through 2.13

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting.

Recommendations For REMISE Payment Module versions 3.0.12 and earlier, update to a version later than 3.0.12. For REMISE Payment Module versions 2.11 through 2.13, update to a version later than 2.13.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-6016

Affected Products

Remise Payment Module

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6016 · Security Note
• http://remise.jp/data/pdf/20191002.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6016 · Vendor Advisory
• http://jvn.jp/en/jp/JVN59436681/index.html · Note