CVE-2019-20798

An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104

published May 17, 2020

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and execute arbitrary commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01654 · 76.4th percentile
Published
2020-05-17T23:06Z
EPSS history
Timeline
  • 17 MAY 23:06Z
    An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104
    cvelistv5