CVE-2019-13274 - In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter

MEDIUM

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter

Published Aug 27, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.91%

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/csvinfo.c		x_refsource_MISCThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html		x_refsource_CONFIRMMailing ListThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 27, 2019

Updated Aug 4, 2024

Reserved Jul 4, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a