CVE-2019-17225: XSS
First published: Sun Oct 06 2019(Updated: )
Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intelliants Subrion | =4.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Subrion 4.2.1?
The vulnerability ID for Subrion 4.2.1 is CVE-2019-17225.
What is the severity rating of CVE-2019-17225?
CVE-2019-17225 has a severity rating of medium (5.4).
How does Subrion 4.2.1 allow XSS?
Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, also known as an "Admin Member JSON Update" issue.
How can I check if my Subrion installation is affected by CVE-2019-17225?
You can check if your Subrion installation is affected by CVE-2019-17225 by verifying that your version is 4.2.1.
Are there any known fixes for CVE-2019-17225?
Currently, there are no known fixes for CVE-2019-17225. It is recommended to update to the latest version of Subrion when a fix becomes available.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intelliants
- canonical/intelliants subrion
- version/intelliants subrion/4.2.1