CVE-2019-8939

2019-02-1916:29:00

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.

CPENameOperatorVersion
tautullieq1.4.4
tautullieq1.4.12
tautullieq1.2.3
tautullieq1.4.11
tautullieq2.0.17-beta
tautullieq2.1.4
tautullieq1.4.19
tautullieq1.2.10
tautullieq1.4.22
tautullieq1.2.15

Name	Operator	Version
tautulli	eq	1.4.4
tautulli	eq	1.4.12
tautulli	eq	1.2.3
tautulli	eq	1.4.11
tautulli	eq	2.0.17-beta
tautulli	eq	2.1.4
tautulli	eq	1.4.19
tautulli	eq	1.2.10
tautulli	eq	1.4.22
tautulli	eq	1.2.15