Lucene search
GoogleOSV:CVE-2019-20798HistoryMay 18, 2020 - 12:15 a.m.
CVE-2019-20798
2020-05-1800:15:11
Google
osv.dev
8
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and execute arbitrary commands.
Related
cvelist
cvelist
CVE-2019-20798
2020-05-17 23:06:16
prion
prion
Default configuration
2020-05-18 00:15:00
nvd
nvd
CVE-2019-20798
2020-05-18 00:15:11
cve
cve
CVE-2019-20798
2020-05-18 00:15:11
redhatcve
redhatcve
CVE-2019-20798
2022-05-20 22:25:03
openvas
openvas
Cherokee Web Server <= 1.2.104 Multiple Vulnerabilities
2020-05-20 00:00:00
nessus
nessus
GLSA-202012-09 : Cherokee: Multiple vulnerabilities
2020-12-24 00:00:00
gentoo
gentoo
Cherokee: Multiple vulnerabilities
2020-12-23 00:00:00