CVE-2019-1577 - Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScript or HTML

Back Back to CVE browser

MEDIUM

Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScript or HTML

Published Jul 1, 2019

6.3

MEDIUM

CVSS 3.0

EPSS 0.90%

Description

Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScript or HTML.

Affected products

Vendor Palo Alto Networks Product Traps Default
n/a
- Version
  5.0.5 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Palo Alto Networks

Traps

n/a

Version	Status	Constraints
5.0.5 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

http://www.securityfocus.com/bid/109053
vdb-entryx_refsource_BID
https://security.paloaltonetworks.com/CVE-2019-1577
x_refsource_CONFIRM

Link	Providers	Tags
http://www.securityfocus.com/bid/109053		vdb-entryx_refsource_BID
https://security.paloaltonetworks.com/CVE-2019-1577		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner palo_alto

Published Jul 1, 2019

Updated Aug 4, 2024

Reserved Dec 6, 2018

Link CVE-2019-1577

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-1577

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-1577