Cross-Site Scripting Vulnerability in Portainer by Portainer Team
CVE-2019-16878

5.4MEDIUM

Key Information:

Vendor

Portainer

Status
Portainer
Vendor
CVE Published:
7 November 2019

What is CVE-2019-16878?

Portainer, a popular container management tool, is susceptible to a Cross-Site Scripting (XSS) vulnerability that affects all versions prior to 1.22.1. This security flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data theft. It is essential for users of Portainer to upgrade to the latest version to mitigate this risk and ensure the security of their container management environments.

References

https://fortiguard.com/zeroday/FG-VD-19-119
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.