CVE-2019-17189 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2019-17189

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-22 Oct, 2019 | 15:15

Updated At-22 Oct, 2019 | 18:00

totemodata 3.0.0_b936 has XSS via a folder name.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

totemo>>totemodata>>3.0.0_b936

cpe:2.3:a:totemo:totemodata:3.0.0_b936:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.compass-security.com/en/research/advisories/	cve@mitre.org	Exploit Mitigation Third Party Advisory
https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-021_totemodata_Cross-Site_Scripting_XSS.txt	cve@mitre.org	Exploit Mitigation Third Party Advisory
https://www.totemo.com/en/solutions/secure-file-transfer	cve@mitre.org	Vendor Advisory