CVE-2019-25088

Source

https://nvd.nist.gov/vuln/detail/CVE-2019-25088

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-25088.json

Aliases

• GHSA-8qwh-rm6c-jv96

Published

2022-12-27T10:15:10Z

Modified

2024-04-11T04:54:55.518304Z

Details

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier assigned to this vulnerability.

References

• https://github.com/ytti/oxidized-web/commit/55ab9bdc68b03ebce9280b8746ef31d7fdedcc45
• https://github.com/ytti/oxidized-web/pull/195
• https://vuldb.com/?ctiid.216870
• https://vuldb.com/?id.216870