medium6.1
CVE-2020-14210
Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information.
Impact
Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monitorapp | Application Insight Web Application | through 2020-06-16 |
| Monitorapp | Web Application Firewall | through 2020-06-16 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/kbgsft/vuln-AIWAF/wiki/Cross-site-scripting%28XSS%29-vulnerability-in-AIWAF-in-MONITORAPP-by-xcuter
- https://github.com/monitorapp-aicc/report/wiki/CVE-2020-14210
- https://github.com/kbgsft/vuln-AIWAF/wiki/Cross-site-scripting%28XSS%29-vulnerability-in-AIWAF-in-MONITORAPP-by-xcuter
- https://github.com/monitorapp-aicc/report/wiki/CVE-2020-14210