CVE-2019-16238

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*

Information

Published : 2019-09-12 09:15

Updated : 2019-09-13 11:34


NVD link : CVE-2019-16238

Mitre link : CVE-2019-16238


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

afterlogic

  • aurora