PT-2019-8914 · Adrenalin · Adrenalin 5.4 Hrms

Rishu Ranjan · Published 2019-03-25 · Updated 2026-03-02 · CVE-2018-12652

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adrenalin 5.4 HRMS Software (affected versions not specified)

Description A Reflected Cross Site Scripting (XSS) issue was discovered. The user-supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "LeaveEmployeeSearch.aspx" API endpoint, specifically through the prntFrmName or prntDDLCntrlName parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-12652

Affected Products

Adrenalin 5.4 Hrms

References · 5

• 🔥 https://knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-12652 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12652 · Security Note
• https://t.me/cveNotify/153784 · Telegram Post
• https://securethy.com/2019/02/CVE-2018-12652-reflected-XSS.html · Note