CVE-2019-20378: XSS
Published Jan 11, 2020
·Updated
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
Affected Software
1 affected component
Ganglia Ganglia-web<=3.7.5
Event History
Jan 11, 2020
CVE Published
via MITRE·03:01 AM
Data Sourced
via MITRE·03:01 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20378?
CVE-2019-20378 is classified as a medium severity vulnerability due to the potential for XSS attacks.
2
How do I fix CVE-2019-20378?
To fix CVE-2019-20378, upgrade to a version of Ganglia Web Frontend later than 3.7.5.
3
What type of vulnerability is CVE-2019-20378?
CVE-2019-20378 is a Cross-Site Scripting (XSS) vulnerability.
4
What components are affected by CVE-2019-20378?
CVE-2019-20378 affects Ganglia Web Frontend versions up to and including 3.7.5.
5
What can an attacker do with CVE-2019-20378?
An attacker can exploit CVE-2019-20378 to execute arbitrary JavaScript in the context of the user’s browser.