Lucene search
PRIOn knowledge basePRION:CVE-2019-25088HistoryDec 27, 2022 - 10:15 a.m.
Cross site scripting
2022-12-2710:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
cross site scripting
ytti oxidized web
remote attack
patch 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45
nvd-216870
0.001 Low
EPSS
Percentile
41.2%
A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the argument to_research leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier assigned to this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oxidized_web | eq | < 201971 |
Related
cve
cve
CVE-2019-25088
2022-12-27 10:15:10
github
github
Oxidized Web vulnerable to Cross-site Scripting
2022-12-27 12:30:20
cvelist
cvelist
CVE-2019-25088 ytti Oxidized Web conf_search.haml cross site scripting
2022-12-27 09:41:31
veracode
veracode
Cross-Site Scripting (XSS)
2023-01-02 15:00:14
nvd
nvd
CVE-2019-25088
2022-12-27 10:15:10
osv
osv
Oxidized Web vulnerable to Cross-site Scripting
2022-12-27 12:30:20
CVE-2019-25088
2022-12-27 10:15:10