XSS in Cantemo Portal
CVE-2019-7551
Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Cantemo Portal
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-7551?
- CVE-2019-7551 is a critical-severity vulnerability in Cantemo Portal, classified under Cross-site Scripting. CVSS score: 9.0/10. Published 2019-04-10.
- How severe is CVE-2019-7551?
- Critical severity. CVSS v3 base score is 9.0 out of 10.