CVE-2019-19367: XSS
Published Nov 27, 2019
·Updated
A cross-site scripting (XSS) vulnerability in app/fax/faxfiles.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Affected Software
1 affected component
FusionPBX Fusionpbx=4.4.1
Remediation
Event History
Nov 27, 2019
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19367?
The severity of CVE-2019-19367 is medium with a severity value of 6.1.
2
How can remote attackers exploit CVE-2019-19367?
Remote attackers can exploit CVE-2019-19367 by injecting arbitrary web script or HTML via the id parameter in app/fax/fax_files.php.
3
Which version of FusionPBX is affected by CVE-2019-19367?
FusionPBX version 4.4.1 is affected by CVE-2019-19367.
4
Is there a fix available for CVE-2019-19367?
Yes, a fix for CVE-2019-19367 is available. Please refer to the references for more information.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-19367?
The Common Weakness Enumeration (CWE) ID for CVE-2019-19367 is 79.