PT-2020-9876
CVE-2019-17125
·
Published
2020-01-17
·
Updated
2020-01-22
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SolarWinds Orion Platform version 2019.2 HF1
Description
A Reflected Client Side Template Injection (CSTI) issue was found, allowing an attacker to inject an Angular expression and escape the Angular sandbox, resulting in stored XSS.
Recommendations
For SolarWinds Orion Platform version 2019.2 HF1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾