CVE-2019-15227 - FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console

Back Back to CVE browser

MEDIUM

FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console

Published Aug 20, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.83%

Description

FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6239
Advisory
https://www.sevenlayers.com/index.php/236-flightpath-4-8-3-xss
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6239		Advisory
https://www.sevenlayers.com/index.php/236-flightpath-4-8-3-xss		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 20, 2019

Updated Aug 5, 2024

Reserved Aug 19, 2019

Link CVE-2019-15227

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15227

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 20, 2019

Updated Aug 5, 2024

Link EUVD-2019-6239

GitHub

No data