CVE-2019-11643 - Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10

Back Back to CVE browser

MEDIUM

Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10

Published May 8, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.88%

Description

Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated and unauthenticated users.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://seclists.org/fulldisclosure/2019/May/2
x_refsource_MISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3313
Advisory
https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/
x_refsource_MISCProduct

Link	Providers	Tags
http://seclists.org/fulldisclosure/2019/May/2		x_refsource_MISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3313		Advisory
https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/		x_refsource_MISCProduct