Lucene search
PRIOn knowledge basePRION:CVE-2019-16385HistoryJun 04, 2020 - 4:15 p.m.
Cross site scripting
2020-06-0416:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
37.3%
Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thinfinity_virtualui | le | 2.5.17.2 |
Related
nvd
nvd
CVE-2019-16385
2020-06-04 16:15:11
cvelist
cvelist
CVE-2019-16385
2020-06-04 15:29:35
cve
cve
CVE-2019-16385
2020-06-04 16:15:11
checkpoint_advisories
checkpoint_advisories