Reflected XSS Vulnerability in Matrix42 Workspace Management Software
CVE-2019-19390

5.4MEDIUM

Key Information:

Vendor

Matrix42

Status
Workspace Management
Vendor
CVE Published:
15 April 2020

What is CVE-2019-19390?

The Software Catalogue section of Matrix42 Workspace Management fails to filter the Search parameter properly, leading to multiple reflected XSS vulnerabilities. Attackers can exploit this flaw by crafting malicious requests that are executed in the context of the affected user's session, allowing for the potential theft of sensitive information or session hijacking. Users are advised to ensure they are using updated versions of the software and apply security best practices to mitigate risks.

References

https://seclists.org/fulldisclosure/2020/Apr/10
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.