CVE-2019-1010199
Medium
Description
ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side validation and If Browser encoding is bypassed, the victim is affected when opening a crafted URL. The fixed version is: 5.2.0.
SeverityMedium
CVSS6.1
Exploit probability—
ProductServicestack
PublishedJul 23, 2019
First seenJul 23, 2019
How to fix
Update
- ServiceStack5.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| servicestack servicestack | 4.5.14 | — |
| ServiceStackNuGet | 4.5.14 ≤ v < 5.2.0 | 5.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.