CVE-2019-0186

🗓️ 26 Apr 2019 15:56:48Reported by apacheType

Apache Pluto Chat Room demo portlet vulnerable to Cross-Site Scripting (XSS) attack

Reporter	Title	Published	Views	Family All 13
0day.today	Apache Pluto 3.0.0 / 3.0.1 - Persistent Cross-Site Scripting Vulnerability	26 Apr 201900:00	–	zdt
Check Point Advisories	Apache Pluto Chat Room Demo Portlet Persistent Cross-Site Scripting (CVE-2019-0186)	30 Apr 201900:00	–	checkpoint_advisories
CVE	CVE-2019-0186	26 Apr 201915:56	–	cve
Exploit DB	Apache Pluto 3.0.0 / 3.0.1 - Persistent Cross-Site Scripting	26 Apr 201900:00	–	exploitdb
EUVD	EUVD-2022-5492	3 Oct 202520:07	–	euvd
exploitpack	Apache Pluto 3.0.0 3.0.1 - Persistent Cross-Site Scripting	26 Apr 201900:00	–	exploitpack
Github Security Blog	Cross-site Scripting in Apache Pluto Chatroom demo	24 May 202216:44	–	github
NVD	CVE-2019-0186	26 Apr 201916:29	–	nvd
OSV	CVE-2019-0186	26 Apr 201916:29	–	osv
OSV	GHSA-W47G-4VRC-M3W2 Cross-site Scripting in Apache Pluto Chatroom demo	24 May 202216:44	–	osv

[
  {
    "product": "Apache Pluto",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.0"
      },
      {
        "status": "affected",
        "version": "3.0.1"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46759/
securityfocus	www.securityfocus.com/bid/108091
portals	www.portals.apache.org/pluto/security.html
lists	www.lists.apache.org/thread.html/d093e6b0e5f9b3b50928255451afefd8f8fbdcd5bf28a726769a919a%40%3Cpluto-user.portals.apache.org%3E
openwall	www.openwall.com/lists/oss-security/2019/04/25/8
mail-archives	www.mail-archives.apache.org/mod_mbox/portals-pluto-user/201904.mbox/%3CCAAqbB_ev=0KNgZmmNAq2=q11i1GYLGN6J-xCKx8Q8dbxZ4tZYg%40mail.gmail.com%3E
packetstormsecurity	www.packetstormsecurity.com/files/152642/Apache-Pluto-3.0.0-3.0.1-Cross-Site-Scripting.html

29 Apr 2019 10:06Current

6Medium risk

Vulners AI Score6

EPSS0.05755