CVE-2019-5925

2019-03-1221:00:00

jpcert

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3.1.1 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CNA Affected

[
  {
    "product": "Dradis Community Edition and Dradis Professional Edition",
    "vendor": "Security Roots Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "Dradis Community Edition v3.11 and earlier, Dradis Professional Edition v3.1.1 and earlier"
      }
    ]
  }
]