CVE-2019-25090: FreePBX arimanager Views cross site scripting
First published: Tue Dec 27 2022(Updated: )
A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl leads to cross site scripting. The attack may be launched remotely. Upgrading to version 13.0.5.4 is able to address this issue. The name of the patch is 199dea7cc7020d3c469a86a39fbd80f5edd3c5ab. It is recommended to upgrade the affected component. VDB-216878 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sangoma FreePBX | <13.0.5.4 | |
| <13.0.5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-25090?
The severity of CVE-2019-25090 is medium with a score of 6.1.
How does CVE-2019-25090 affect FreePBX arimanager?
CVE-2019-25090 affects FreePBX arimanager up to version 13.0.5.3.
What is the vulnerability classification of CVE-2019-25090?
CVE-2019-25090 is classified as a problematic vulnerability.
How can the cross-site scripting (XSS) vulnerability be exploited in CVE-2019-25090?
The cross-site scripting (XSS) vulnerability in CVE-2019-25090 can be exploited remotely by manipulating the argument dataurl.
How can I mitigate the risk of CVE-2019-25090?
You can mitigate the risk of CVE-2019-25090 by upgrading to version 13.0.5.4 of FreePBX arimanager.
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/weakness
- agent/author
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/sangoma
- canonical/sangoma freepbx