Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Rambox Subscribe
Filtered by product Rambox
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-17625 1 Rambox 1 Rambox 2019-10-16 8.5 HIGH 9.0 CRITICAL
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element.