CVE-2019-25105

Name of the Vulnerable Software and Affected Versions dro.pm (affected versions not specified)

Description A problematic issue was found in dro.pm, affecting an unknown part of the file web/fileman.php. The manipulation of the secret/key argument leads to cross-site scripting. It is possible to initiate the attack remotely.

Recommendations To fix this issue, it is recommended to apply the patch named fa73c3a42bc5c246a1b8f815699ea241aef154bb. As a temporary workaround, consider restricting access to the web/fileman.php file until the patch is applied. Additionally, avoid using the secret/key argument in the affected file until the issue is resolved.