Cross-Site Scripting Vulnerability in WSO2 Dashboard Server
CVE-2019-6514

4.8MEDIUM

Key Information:

Vendor

Wso2

Status
Dashboard Server
Vendor
CVE Published:
14 May 2019

What is CVE-2019-6514?

A Cross-Site Scripting vulnerability exists in WSO2 Dashboard Server 2.0.0, where an attacker can inject malicious JavaScript code into the application. This payload is stored in the database and can be executed when the page is viewed, potentially compromising the security of users who access the affected dashboard.

References

https://www.excellium-services.com/cert-xlm-advisory
https://wso2.com/security-patch-releases/dashboard-server
https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6514

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.