CVE-2018-20239 in Application Links

Riassunto

di MITRE

Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 19/12/2018
• Moderazione: accettato
• Voce: VDB-134226
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 5.4 (NVD)
• EPSS: 0.03401
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-20239
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-20239
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-20239/