CVE-2019-20222 in Support Incident Tracker

Resumen

por MITRE

In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2020-01-02
• Moderación: aceptado
• Artículo: VDB-148231
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 6.1 (NVD)
• EPSS: 0.00668
• KEV: no
• Actividades: muy bajo
• Sector: Energy, Police, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-20222
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-20222
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-20222/