PT-2020-9877
CVE-2019-17127
·
تاريخ النشر
2020-01-17
·
تاريخ التحديث
2020-01-22
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SolarWinds Orion Platform version 2019.2 HF1
Description
A Stored Client Side Template Injection (CSTI) issue was found in the SolarWinds Orion Platform, allowing an attacker to inject an Angular expression and escape the Angular sandbox, resulting in stored XSS. This can potentially lead to privilege escalation.
Recommendations
For SolarWinds Orion Platform version 2019.2 HF1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾