PT-2020-9582

CVE-2019-14652

·

Published

2020-02-13

·

Updated

2020-02-18

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) versions prior to 2019-08-02
Description: The issue allows for cross-site scripting (XSS) under certain circumstances. XSS is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take control of the user's session.
Recommendations: For versions prior to 2019-08-02, update to a version released after 2019-08-02 to resolve the issue. As a temporary workaround, consider restricting access to the explorer.js file to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾