PT-2021-9098

CVE-2019-25046

·

Published

2021-06-10

·

Updated

2021-06-17

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Cerberus FTP Server Enterprise versions 10.0.0 through 10.0.18 Cerberus FTP Server Enterprise versions 11.0.0 through 11.0.3
Description The issue allows for XSS via an SVG document. This is related to the Web Client in Cerberus FTP Server Enterprise.
Recommendations For Cerberus FTP Server Enterprise versions 10.0.0 through 10.0.18, update to version 10.0.19 or later. For Cerberus FTP Server Enterprise versions 11.0.0 through 11.0.3, update to version 11.0.4 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2019-25046
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com