CVE-2019-16925

** DISPUTED ** Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has full access.

CVSS v3 6.1 MEDIUM
CVSS v2.0 4.3 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://fatihhcelik.blogspot.com/2019/09/flower-100-has-xss-via-name-parameter.html	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:flower_project:flower:1.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-09-28 00:15

Updated : 2024-08-05 02:15

NVD link : CVE-2019-16925

Mitre link : CVE-2019-16925

CVE.ORG link : CVE-2019-16925

JSON object : View

Products Affected

flower_project

flower

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2019-16925", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2019-09-28T00:15:10.403", "references": [{"url": "https://fatihhcelik.blogspot.com/2019/09/flower-100-has-xss-via-name-parameter.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren\u2019t user facing configuration options. They are internal backend config options and person having rights to change them already has full access"}, {"lang": "es", "value": "** EN DSIPUTA ** Flower 0.9.3 tiene una vulnerabilidad de cruce a trav\u00e9s del par\u00e1metro de nombre en una llamada @ app.task. NOTA: El autor del proyecto declar\u00f3 que no cree que esta sea una vulnerabilidad v\u00e1lida. El nombre del trabajador y el nombre de la tarea no son opciones de configuraci\u00f3n para el usuario. Son opciones de configuraci\u00f3n interna del backend y la persona que tiene derecho a cambiarlas ya tiene acceso completo."}], "lastModified": "2024-08-05T02:15:26.087", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:flower_project:flower:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4F749D8-25DD-4F0F-AE72-84ABD6B63E72"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}