PT-2019-8778

CVE-2018-11200

·

Publicado

2019-09-20

·

Atualizado

2021-01-19

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Mautic versions 2.11.0 and earlier Mautic version 2.13.1
Description An issue was discovered that allows for Stored XSS via the company name field. This Cross Site Scripting (XSS) vulnerability can result in denial of service and execution of javascript code.
Recommendations For Mautic versions 2.11.0 and earlier, update to 2.14.0 or later. For Mautic version 2.13.1, update to 2.14.0 or later.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2018-11200
GHSA-9HX7-RG7W-XM79
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com