CVE-2019-1569

N/A

Description

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.

CVE Details

CVSS v3.1 ScoreN/A

Published3/26/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

paloaltonetworks:expedition

Weaknesses (CWE)

CWE-79

References

http://www.securityfocus.com/bid/107564(psirt@paloaltonetworks.com)

https://securityadvisories.paloaltonetworks.com/Home/Detail/142(psirt@paloaltonetworks.com)

https://www.tenable.com/security/research/tra-2019-13(psirt@paloaltonetworks.com)

http://www.securityfocus.com/bid/107564(af854a3a-2127-422b-91ae-364da2661108)

https://securityadvisories.paloaltonetworks.com/Home/Detail/142(af854a3a-2127-422b-91ae-364da2661108)

https://www.tenable.com/security/research/tra-2019-13(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.