What is CVE-2019-20798?

CVE-2019-20798 is a high-severity vulnerability in Cherokee-project Cherokee, classified under Cross-site Scripting. CVSS score: 8.4/10. Published 2020-05-18.

How severe is CVE-2019-20798?

High severity. CVSS v3 base score is 8.4 out of 10.

XSS in Cherokee-project Cherokee

CVE-2019-20798

An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the admini…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.017 (74.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H.

Affected products

Cherokee-project Cherokee
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)

Frequently asked questions

What is CVE-2019-20798?: CVE-2019-20798 is a high-severity vulnerability in Cherokee-project Cherokee, classified under Cross-site Scripting. CVSS score: 8.4/10. Published 2020-05-18.
How severe is CVE-2019-20798?: High severity. CVSS v3 base score is 8.4 out of 10.