CVE-2019-3686

—

CVSS 3.1

6.1 medium

EPSS

<1%p48

Published

Jan 17, 2020 (Jan 17, 2020)

Modified

Jun 17, 2026

Description

openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security

Vendors: suse
Products: openqa
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.