medium6.1
CVE-2019-25047
Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.
Impact
Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Greenbone | Greenbone Security Assistant | before 8.0.2 |
| Greenbone | Greenbone Os | before 5.0.10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/greenbone/gsa/blob/master/CHANGELOG.md#802---2020-05-13
- https://github.com/greenbone/gsa/issues/1601
- https://github.com/greenbone/gsa/pull/1603
- https://github.com/greenbone/gsa/blob/master/CHANGELOG.md#802---2020-05-13
- https://github.com/greenbone/gsa/issues/1601
- https://github.com/greenbone/gsa/pull/1603