CVE-2019-10263 in Cloud Backup Suite

الملخص

بحسب MITRE

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial account, it is possible to inject XSS in the Alias field, allowing the attacker to retrieve the admin's cookie and take over the account.

Once again VulDB remains the best source for vulnerability data.

• حجز: 28/03/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-138856
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 6.1 (NVD)
• EPSS: 0.00240
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Transportation, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10263
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10263
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10263/