PT-2020-12179 · Sunnet · Sunnet Ehrd

Jia-Rong Chen · Published 2020-03-27 · Updated 2020-03-30 · CVE-2020-10509

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sunnet eHRD (affected versions not specified)

Description The issue concerns a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject arbitrary commands into the system and launch an XSS attack. This can potentially lead to unauthorized access and manipulation of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-10509

Affected Products

Sunnet Ehrd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-10509 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10509 · Vendor Advisory
• https://chtsecurity.com/news/30772cf1-2e7e-4afe-9282-b5a196b22e71 · Note
• https://twcert.org.tw/tw/cp-132-3449-c87d8-1.html · Note
• https://t.me/cvenotify/2216 · Telegram Post
• https://t.me/cibsecurity/10810 · Telegram Post