CVE-2019-25047 - Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad

MEDIUM

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad

Published Jun 21, 2021

6.1

MEDIUM

CVSS 3.1

EPSS 1.11%

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11497		Advisory
https://github.com/greenbone/gsa/blob/master/CHANGELOG.md#802---2020-05-13		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/greenbone/gsa/issues/1601		x_refsource_MISCExploitPatchThird Party Advisory
https://github.com/greenbone/gsa/pull/1603		x_refsource_MISCPatchThird Party Advisory