Output Filtering Issue in Backdrop CMS Affecting Administrators
CVE-2019-14769

6.1MEDIUM

Key Information:

Vendor

Backdropcms

Status
Backdrop
Vendor
CVE Published:
8 August 2019

What is CVE-2019-14769?

Backdrop CMS versions prior to 1.12.8 and 1.13.3 have an output filtering vulnerability that affects how block labels, crafted by administrators, are displayed. An attacker with rights to create custom blocks could exploit this weakness to potentially execute unauthorized scripts during administrative operations. This highlights the importance of strict access controls and output validation within administrative interfaces.

References

https://backdropcms.org/security/backdrop-sa-core-2019-011
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-14769 : Output Filtering Issue in Backdrop CMS Affecting Administrators