CVE-2019-1570 - The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings

MEDIUM

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings

Published Mar 26, 2019

4.8

MEDIUM

CVSS 3.0

EPSS 1.06%

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
Expedition 1.1.8 and earlier	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://www.securityfocus.com/bid/107564		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://securityadvisories.paloaltonetworks.com/Home/Detail/142		x_refsource_CONFIRMThird Party Advisory
https://www.tenable.com/security/research/tra-2019-13		x_refsource_MISCExploitThird Party Advisory