CVE-2019-7551
Critical
Description
Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app.
SeverityCritical
CVSS9.0
Exploit probability—
Product
Cantemo Portal
PublishedApr 10, 2019
First seenApr 10, 2019
How to fix
Update
- cantemo portal3.2.13, 3.3.8, 3.4.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cantemo portal | v < 3.2.13, 3.3.0 ≤ v < 3.3.8, 3.4.0 ≤ v < 3.4.9 | 3.2.13, 3.3.8, 3.4.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.