CVE-2019-19384: XSS
Published Nov 28, 2019
·Updated
A cross-site scripting (XSS) vulnerability in app/fax/faxlogview.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the faxuuid parameter.
Affected Software
1 affected component
FusionPBX Fusionpbx=4.4.1
Remediation
Event History
Nov 28, 2019
CVE Published
via MITRE·11:56 PM
Data Sourced
via MITRE·11:56 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19384?
CVE-2019-19384 has a moderate severity rating due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2019-19384?
To fix CVE-2019-19384, you should update FusionPBX to a version above 4.4.1 where the vulnerability has been patched.
3
What does CVE-2019-19384 affect?
CVE-2019-19384 specifically affects FusionPBX version 4.4.1 and allows remote code injection through the fax_uuid parameter.
4
Can CVE-2019-19384 be exploited remotely?
Yes, CVE-2019-19384 can be exploited remotely by attackers to inject malicious scripts.
5
Is CVE-2019-19384 related to any other vulnerabilities?
CVE-2019-19384 is a standalone vulnerability but shares characteristics typical of cross-site scripting issues in web applications.