CVEvulnerability

CVE-2019-10715

5.4 MEDIUM Published 2019-10-21 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2019-10-21
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected]): 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses: CWE-79

Description

There is Stored XSS in Verodin Director 3.5.3.0 and earlier via input fields of certain tooltips, and on the Tags, Sequences, and Actors pages.

Affected configurations

• verodin director (< 3.5.4.0)

Related

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

http://www.nolanbkennedy.com/post/cve-2019-10715-stored-xss-verodin-director Third Party Advisory
https://www.verodin.com/technology/platform Product
http://www.nolanbkennedy.com/post/cve-2019-10715-stored-xss-verodin-director Third Party Advisory
https://www.verodin.com/technology/platform Product