Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-125089
HistoryFeb 21, 2023 - 3:15 a.m.

Cross site scripting

2023-02-2103:15:00
PRIOn knowledge base
www.prio-n.com
6
cross site scripting
cention-chatserver
vulnerability
version 3.9
patch c4c0258bbd18f6915f97f91d5fee625384096a26
remote attack
nvd
lib/internalchatprotocol.fe
upgrade

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.5%

A vulnerability was found in cention-chatserver 3.8.0-rc1. It has been declared as problematic. Affected by this vulnerability is the function _formatBody of the file lib/InternalChatProtocol.fe. The manipulation of the argument body leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.9 is able to address this issue. The identifier of the patch is c4c0258bbd18f6915f97f91d5fee625384096a26. It is recommended to upgrade the affected component. The identifier VDB-221497 was assigned to this vulnerability.

CPENameOperatorVersion
cention-chatservereq3.8.0 rc1

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.5%

Related for PRION:CVE-2014-125089