CVE-2019-14471: XSS
Published Aug 1, 2019
·Updated
TestLink 1.9.19 has XSS via the error.php message parameter.
Affected Software
1 affected component
TestLink TestLink=1.9.19
Event History
Aug 1, 2019
CVE Published
via MITRE·02:06 PM
Data Sourced
via MITRE·02:06 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14471?
CVE-2019-14471 is classified as a medium severity vulnerability due to the potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2019-14471?
To fix CVE-2019-14471, upgrade to a patched version of TestLink that addresses the XSS vulnerability.
3
What software is affected by CVE-2019-14471?
CVE-2019-14471 specifically affects TestLink version 1.9.19.
4
What type of vulnerability is CVE-2019-14471?
CVE-2019-14471 is a cross-site scripting (XSS) vulnerability that can allow attackers to inject malicious scripts.
5
Can CVE-2019-14471 be exploited remotely?
Yes, CVE-2019-14471 can be exploited remotely, allowing attackers to perform XSS attacks via the error.php page.