CVE-2019-3686

MEDIUM

openQA < 2019-07-22 - Cross-Site Scripting via Distri and Version Parameters

Title source: llm
STIX 2.1

Description

openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security

References (1)

Core 1
Core References
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.suse.com/show_bug.cgi?id=1142849

Scores

CVSS v3 6.5
EPSS 0.0031
EPSS Percentile 53.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
suse/openqa < 2019-07-22
Published Jan 17, 2020
Tracked Since Feb 18, 2026