PT-2023-10109 · Unknown · Kkokko Neoxplora

Published 2023-01-04 · Updated 2024-05-17 · CVE-2014-125039

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions kkokko NeoXplora (affected versions not specified)

Description A problematic issue has been found in the component Trainer Handler of kkokko NeoXplora, leading to cross site scripting. The manipulation can be launched remotely.

Recommendations To fix this issue, it is recommended to apply a patch with the name dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6. As a temporary workaround, consider restricting access to the Trainer Handler component until a patch is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-125039

Affected Products

Kkokko Neoxplora

References · 6

• https://github.com/kkokko/NeoXplora/commit/dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-125039 · Security Note
• https://vuldb.com/?id.217352 · Note
• https://vuldb.com/?ctiid.217352 · Note
• https://t.me/cibsecurity/55852 · Telegram Post
• https://t.me/cvenotify/41690 · Telegram Post