PT-2020-7133 · Jara · Jara

Henri Salo · Published 2020-01-21 · Updated 2020-01-23 · CVE-2011-4095

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Jara version 1.6

Description The issue is related to a Cross-Site Scripting (XSS) vulnerability. Cross-Site Scripting is a type of security vulnerability that occurs when an attacker is able to inject malicious scripts into a website, which are then executed by the user's browser.

Recommendations For Jara version 1.6, update to a version that includes a fix for the XSS vulnerability, if available. As a temporary workaround, consider implementing input validation and sanitization for all user-input fields to minimize the risk of exploitation. Restrict access to sensitive areas of the application to minimize the risk of XSS attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-4095

Affected Products

Jara

References · 5

• 🔥 https://exploit-db.com/exploits/18069 · Exploit
• 🔥 https://openwall.com/lists/oss-security/2011/10/31/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4095 · Security Note
• https://seclists.org/oss-sec/2011/q4/193 · Note
• https://t.me/cibsecurity/9318 · Telegram Post