Non évaluée

An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls\conference_control_details.php, an unsanitized id variable comin...

CVE-2019-16968 Première détection SecPulse Oct 22, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls\conference_control_details.php, an unsanitized id variable coming from the URL is reflected in HTML on 2 occasions, leading to XSS.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory resp3ctblog.wordpress.com
patch github.com

Faits clés

Gravité: Non évaluée
Publication: Oct 22, 2019
Première détection SecPulse: Oct 22, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50