Lucene search
Redhat.comRH:CVE-2019-20798HistoryMay 20, 2022 - 10:25 p.m.
CVE-2019-20798
2022-05-2022:25:03
redhat.com
access.redhat.com
9
cve-2019-20798
xss
cherokee
web server
vulnerability
administrator panel
arbitrary commands
EPSS
0.005
Percentile
75.7%
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and execute arbitrary commands.
Related
cvelist
cvelist
CVE-2019-20798
2020-05-17 23:06:16
osv
osv
CVE-2019-20798
2020-05-18 00:15:11
prion
prion
Default configuration
2020-05-18 00:15:00
nvd
nvd
CVE-2019-20798
2020-05-18 00:15:11
cve
cve
CVE-2019-20798
2020-05-18 00:15:11
openvas
openvas
Cherokee Web Server <= 1.2.104 Multiple Vulnerabilities
2020-05-20 00:00:00
nessus
nessus
GLSA-202012-09 : Cherokee: Multiple vulnerabilities
2020-12-24 00:00:00
gentoo
gentoo
Cherokee: Multiple vulnerabilities
2020-12-23 00:00:00