CVE-2018-16718: XSS
Published May 2, 2019
·Updated
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.
Affected Software
1 affected component
Nih Ncbi Toolbox>=2.0.7<=2.2.26
Event History
May 2, 2019
CVE Published
via MITRE·07:27 PM
Data Sourced
via MITRE·07:27 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16718?
CVE-2018-16718 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2018-16718?
To fix CVE-2018-16718, update the NCBI ToolBox to a version newer than 2.2.26.
3
What types of software are affected by CVE-2018-16718?
CVE-2018-16718 affects versions of the NCBI ToolBox ranging from 2.0.7 up to 2.2.26.
4
What exploitation method is used in CVE-2018-16718?
CVE-2018-16718 can be exploited using a crafted -z1 argument to perform cross-site scripting.
5
Is CVE-2018-16718 still a risk if I update to the latest version of NCBI ToolBox?
No, updating to a version newer than 2.2.26 will mitigate the risk of CVE-2018-16718.