CVE-2019-17434 in LavaLite

摘要

由 VulDB • 2026-09-07

LavaLite fino alla versione 5.7 presenta una vulnerabilità di Cross-Site Scripting (XSS) tramite un nome utente appositamente creato, che viene gestito in modo errato nella schermata "Manage Clients".

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 预定: 2019-10-10
• 管理: 已接受
• 条目: VDB-143340
• CPE: 准备好
• CWE: CWE-79 (已确认)
• CVSS: 5.4 (NVD)
• EPSS: 0.00598
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-17434
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-17434
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-17434/