CVE-2019-19385: XSS
Published Nov 28, 2019
·Updated
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the appuuid parameter.
Affected Software
1 affected component
FusionPBX Fusionpbx=4.4.1
Remediation
Event History
Nov 28, 2019
CVE Published
via MITRE·11:56 PM
Data Sourced
via MITRE·11:56 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19385?
The severity of CVE-2019-19385 is rated as medium with a CVSS score of 6.1.
2
How can I exploit the cross-site scripting (XSS) vulnerability in FusionPBX 4.4.1 (CVE-2019-19385)?
Remote attackers can exploit the XSS vulnerability by injecting arbitrary web script or HTML via the app_uuid parameter in app/dialplans/dialplans.php.
3
What software versions are affected by CVE-2019-19385?
The XSS vulnerability in FusionPBX 4.4.1 (CVE-2019-19385) affects all versions of FusionPBX 4.4.1.