CVE-2019-19336
CVE-2019-19336
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.4EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
19 mar 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Productos afectados
Red Hat · ovirt-engine¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →