Unrated severityNVD Advisory· Published Apr 16, 2020· Updated Aug 5, 2024

CVE-2019-19394

Description

Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0.

Affected products

Northern.tech/CFEngine Enterprisedescription
Northern.tech/CFEngine Enterprisellm-fuzzy
Range: >=3.10 <=3.10.6, 3.11.x, >=3.12 <=3.12.2, 3.13.x, 3.14.x

Patches

Vulnerability mechanics

References

cfengine.com/company/blog-detail/cve-2019-19394-mission-portal-javascript-injection-vulnerability/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000