Lucene search
PRIOn knowledge basePRION:CVE-2019-20058HistoryDec 29, 2019 - 7:15 p.m.
Design/Logic Flaw
2019-12-2919:15:00
PRIOn knowledge base
www.prio-n.com
4
0.002 Low
EPSS
Percentile
55.3%
DISPUTED Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040.
References
Related
cve
cve
CVE-2019-20058
2019-12-29 19:15:11
CVE-2018-12040
2018-06-13 22:29:00
cvelist
cvelist
CVE-2019-20058
2019-12-29 18:50:50
CVE-2018-12040
2018-06-13 22:00:00
nvd
nvd
CVE-2019-20058
2019-12-29 19:15:11
CVE-2018-12040
2018-06-13 22:29:00
packetstorm
packetstorm
SensioLabs Symfony 3.3.6 Cross Site Scripting
2018-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2018-12040
2018-06-13 00:00:00
debiancve
debiancve
CVE-2018-12040
2018-06-13 22:29:00
prion
prion
Cross site scripting
2018-06-13 22:29:00