• Type: Bug
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: 3.5.0, 3.4.3
• Affects Version/s: None
• Component/s: None
• Labels:

  • CVE-2018-20239
  • advisory
  • advisory-released
  • cvss-medium
  • patch-management
  • security
  • xss

[CWD-5362] XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239

Collapse comment: David Black added a comment - 14/Feb/2019 3:18 AM, Edited by David Black - 30/Apr/2019 2:26 AM

David Black added a comment - 14/Feb/2019 3:18 AM - edited

This is an independent assessment and you should evaluate its applicability to your own IT environment.

CVSS v3 score: 5.4 => Medium severity

Exploitability Metrics

Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required

Scope Metric

Scope	Changed

Impact Metrics

Confidentiality	Low
Integrity	Low
Availability	None

https://asecurityteam.bitbucket.io/cvss_v3/#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Expand comment: David Black added a comment - 14/Feb/2019 3:18 AM, Edited by David Black - 30/Apr/2019 2:26 AM

David Black added a comment - 14/Feb/2019 3:18 AM - edited This is an independent assessment and you should evaluate its applicability to your own IT environment. CVSS v3 score: 5.4 => Medium severity Exploitability Metrics Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction Required Scope Metric Scope Changed Impact Metrics Confidentiality Low Integrity Low Availability None https://asecurityteam.bitbucket.io/cvss_v3/#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N