CVE-2019-11643
—CVSS 3.0
6.1 medium
EPSS
<1%p57
Published
()
Modified
Description
Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated and unauthenticated users.
- Vendors
- oneshield
- Products
- oneshield policy
- Weakness
- CWE-79
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.