CVE-2019-11429: XSS

Published May 13, 2019

Updated

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 (Pro) and 0.9.8.807 (Pro) is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions > "Add DNS Zone" screen.

Affected Software

3 affected components

Control-webpanel Webpanel=0.9.8.753

Control-webpanel Webpanel=0.9.8.793

Control-webpanel Webpanel=0.9.8.807

Event History

May 13, 2019

CVE Published

via MITRE·02:44 PM

Data Sourced

via MITRE·02:44 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-11429?

CVE-2019-11429 has a medium severity rating due to its potential for reflected cross-site scripting attacks.

How do I fix CVE-2019-11429?

To fix CVE-2019-11429, users should upgrade to patched versions of CentOS Web Panel that address this reflected XSS vulnerability.

Which versions of CentOS Web Panel are affected by CVE-2019-11429?

CVE-2019-11429 affects CentOS Web Panel versions 0.9.8.753, 0.9.8.793, and 0.9.8.807.

What is the impact of CVE-2019-11429?

The impact of CVE-2019-11429 allows an attacker to exploit reflected XSS vulnerabilities in the 'Domain' field on the DNS Functions screen.

Is CVE-2019-11429 a common vulnerability?

CVE-2019-11429 is a specific vulnerability that can be exploited if the affected versions of CentOS Web Panel are used in a web application environment.