PT-2023-11354 · Soerennb · Extplorer

Mario Korth · Published 2023-01-05 · Updated 2024-05-17 · CVE-2019-25096

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions soerennb eXtplorer versions 2.1.12 and earlier

Description A problem has been found in soerennb eXtplorer that allows for cross-site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component to address this issue.

Recommendations For soerennb eXtplorer versions 2.1.12 and earlier, upgrade to version 2.1.13 to address this issue. As a temporary workaround, consider restricting access to components that may be affected by the cross-site scripting vulnerability until the upgrade is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25096

Affected Products

Extplorer

References · 12

• https://github.com/soerennb/extplorer/releases/tag/v2.1.13 · Patch
• https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-25096 · Security Note
• https://ubuntu.com/security/CVE-2019-25096 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-25096 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-25096 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25096 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25096 · Note
• https://t.me/cibsecurity/55945 · Telegram Post
• https://vuldb.com/?ctiid.217435 · Note
• https://t.me/cvenotify/41288 · Telegram Post
• https://vuldb.com/?id.217435 · Note