What is CVE-2018-20370?

CVE-2018-20370 is a medium-severity vulnerability in The-Sz Netchat, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2018-12-23.

How severe is CVE-2018-20370?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in The-Sz Netchat

CVE-2018-20370

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

The-sz Netchat
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-20370?: CVE-2018-20370 is a medium-severity vulnerability in The-Sz Netchat, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2018-12-23.
How severe is CVE-2018-20370?: Medium severity. CVSS v3 base score is 5.4 out of 10.