CVE-2019-20379

2020-01-1103:15:10

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

CPENameOperatorVersion
ganglia-webeq3.7.5
ganglia-webeq3.3.1-4
ganglia-webeq3.3.4
ganglia-webeqmonitor-core/3.3.7
ganglia-webeq3.6.2
ganglia-webeqmonitor-core/3.3.0
ganglia-webeqmonitor-core/3.3.3
ganglia-webeq3.3.1-3
ganglia-webeq3.4.2
ganglia-webeq3.5.9

Name	Operator	Version
ganglia-web	eq	3.7.5
ganglia-web	eq	3.3.1-4
ganglia-web	eq	3.3.4
ganglia-web	eq	monitor-core/3.3.7
ganglia-web	eq	3.6.2
ganglia-web	eq	monitor-core/3.3.0
ganglia-web	eq	monitor-core/3.3.3
ganglia-web	eq	3.3.1-3
ganglia-web	eq	3.4.2
ganglia-web	eq	3.5.9