CVE-2019-9841: XSS

Published Apr 19, 2019

Updated

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.

Affected Software

1 affected component

VestaCP Control Panel=0.9.8-23

Remediation

Patch Available

https://github.com/serghey-rodin/vesta/commit/c28c5d29a3c61bc8110c11349e3f2309cd537cfa

Event History

Apr 19, 2019

CVE Published

via MITRE·06:34 PM

Data Sourced

via MITRE·06:34 PM

Description

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-9841?

CVE-2019-9841 is a vulnerability in Vesta Control Panel 0.9.8-23 that allows XSS attacks via a crafted URL.

How severe is CVE-2019-9841?

CVE-2019-9841 has a severity score of 6.1, which is considered medium.

What is the affected version of Vesta Control Panel?

The affected version of Vesta Control Panel is 0.9.8-23.

How can the XSS vulnerability be exploited in Vesta Control Panel 0.9.8-23?

The XSS vulnerability in Vesta Control Panel 0.9.8-23 can be exploited by crafting a malicious URL.

Where can I find more information about CVE-2019-9841?

You can find more information about CVE-2019-9841 in the references provided: [link1](https://cardaci.xyz/advisories/2019/04/15/vesta-control-panel-0.9.8-23-reflected-xss-in-file-manager-api/), [link2](https://forum.vestacp.com/viewtopic.php?f=25&t=18599&sid=fc1a48fd2f43815b2dc69c3f64caed36), [link3](https://github.com/serghey-rodin/vesta/commit/c28c5d29a3c61bc8110c11349e3f2309cd537cfa).