CVE-2020-36653

CVSS V2 None CVSS V3 None
Description
A vulnerability was found in GENI Portal. It has been rated as problematic. Affected by this issue is some unknown functionality of the file portal/www/portal/error-text.php. The manipulation of the argument error leads to cross site scripting. The attack may be launched remotely. The name of the patch is c2356cc41260551073bfaa3a94d1ab074f554938. It is recommended to apply a patch to fix this issue. VDB-218474 is the identifier assigned to this vulnerability.
Overview
  • CVE ID
  • CVE-2020-36653
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-18T08:15:09
  • Last Modified Date
  • 2023-01-25T16:59:24
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:geni:geni-portal:*:*:*:*:*:*:*:* 1 OR 2020-01-29
References
Reference URL Reference Tags
https://github.com/GENI-NSF/geni-portal/commit/c2356cc41260551073bfaa3a94d1ab074f554938
https://github.com/GENI-NSF/geni-portal/pull/1822
https://vuldb.com/?ctiid.218474
https://vuldb.com/?id.218474
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2020-36653
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36653
History
Created Old Value New Value Data Type Notes
2023-01-18 09:14:43 Added to TrackCVE
2023-01-18 09:14:44 Weakness Enumeration new
2023-01-18 14:15:43 2023-01-18T13:54:48 CVE Modified Date updated
2023-01-18 14:15:43 Received Awaiting Analysis Vulnerability Status updated
2023-01-18 14:15:46 CVSS V3 information new
2023-01-18 14:15:46 CVSS V2 information new
2023-01-25 13:13:35 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-25 13:13:37 CVSS V3 information new
2023-01-25 13:13:37 CVSS V2 information new
2023-01-25 17:14:36 2023-01-25T16:59:24 CVE Modified Date updated
2023-01-25 17:14:36 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-25 17:14:39 CPE Information updated
2023-01-25 17:14:39 CVSS V3 information new
2023-01-25 17:14:39 CVSS V2 information new