CVE-2019-25088

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2019-25088

The CVE-2019-25088 issue affects ytti Oxidized Web, specifically the file lib/oxidized/web/views/conf_search.haml. The root cause is manipulation of the to_research argument, which leads to cross-site scripting. The vulnerability can be triggered remotely, exposing users to XSS via crafted input....