CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25088

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the argument to_research leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier assigned to this vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.3%

CVSS Severity

CVSS v3 Score 3.5

References

Products affected by CVE-2019-25088

Oxidized Web Project » Oxidized Web » Version: N/A

cpe:2.3:a:oxidized_web_project:oxidized_web:-
Oxidized Web Project » Oxidized Web » Version: 0.0.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.0.1
Oxidized Web Project » Oxidized Web » Version: 0.0.2

cpe:2.3:a:oxidized_web_project:oxidized_web:0.0.2
Oxidized Web Project » Oxidized Web » Version: 0.0.3

cpe:2.3:a:oxidized_web_project:oxidized_web:0.0.3
Oxidized Web Project » Oxidized Web » Version: 0.1.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.1.0
Oxidized Web Project » Oxidized Web » Version: 0.1.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.1.1
Oxidized Web Project » Oxidized Web » Version: 0.1.2

cpe:2.3:a:oxidized_web_project:oxidized_web:0.1.2
Oxidized Web Project » Oxidized Web » Version: 0.10.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.10.0
Oxidized Web Project » Oxidized Web » Version: 0.10.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.10.1
Oxidized Web Project » Oxidized Web » Version: 0.10.2

cpe:2.3:a:oxidized_web_project:oxidized_web:0.10.2
Oxidized Web Project » Oxidized Web » Version: 0.11.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.11.0
Oxidized Web Project » Oxidized Web » Version: 0.11.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.11.1
Oxidized Web Project » Oxidized Web » Version: 0.12.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.12.0
Oxidized Web Project » Oxidized Web » Version: 0.12.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.12.1
Oxidized Web Project » Oxidized Web » Version: 0.13.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.13.0
Oxidized Web Project » Oxidized Web » Version: 0.13.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.13.1
Oxidized Web Project » Oxidized Web » Version: 0.5.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.5.0
Oxidized Web Project » Oxidized Web » Version: 0.5.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.5.1
Oxidized Web Project » Oxidized Web » Version: 0.5.2

cpe:2.3:a:oxidized_web_project:oxidized_web:0.5.2
Oxidized Web Project » Oxidized Web » Version: 0.6.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.6.0
Oxidized Web Project » Oxidized Web » Version: 0.6.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.6.1
Oxidized Web Project » Oxidized Web » Version: 0.7.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.7.0
Oxidized Web Project » Oxidized Web » Version: 0.7.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.7.1
Oxidized Web Project » Oxidized Web » Version: 0.8.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.8.0
Oxidized Web Project » Oxidized Web » Version: 0.9.0

cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.0
Oxidized Web Project » Oxidized Web » Version: 0.9.1

cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.1
Oxidized Web Project » Oxidized Web » Version: 0.9.2

cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.2
Oxidized Web Project » Oxidized Web » Version: 0.9.3

cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.3
Oxidized Web Project » Oxidized Web » Version: 012.1

cpe:2.3:a:oxidized_web_project:oxidized_web:012.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25088

Products

Pricing

Contact Us