VulnerabilityModified
CVE-2019-14913
Log data are not properly escaped, leading to persistent XSS in the administration panel.
MEDIUM 5.4EPSS 0.86%
Does this matter?
Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.86% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- prise/adas
- Source
- cve@mitre.org
References
- http://www.adas-sso.com/es/extra/download.phpThird Party Advisory
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adasExploit, Patch, Third Party Advisory
- http://www.adas-sso.com/es/extra/download.phpThird Party Advisory
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adasExploit, Patch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.