CVE-2019-9093

2019-03-2116:01:15

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.

CPENameOperatorVersion
humhubeq1.2.0-beta.2
humhubeq0.11.1
humhubeq1.2.1
humhubeq0.10.0-rc.1
humhubeq1.2.3
humhubeq0.9.0-rc.2
humhubeq1.3.2
humhubeq0.20.0-beta.2
humhubeq0.9.0
humhubeq1.3.3

Name	Operator	Version
humhub	eq	1.2.0-beta.2
humhub	eq	0.11.1
humhub	eq	1.2.1
humhub	eq	0.10.0-rc.1
humhub	eq	1.2.3
humhub	eq	0.9.0-rc.2
humhub	eq	1.3.2
humhub	eq	0.20.0-beta.2
humhub	eq	0.9.0
humhub	eq	1.3.3