CVE-2018-1000856
Last modified
CVE-2018-1000856 is a vulnerability of currently unknown severity. DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. EPSS estimates a 1.42% chance of exploitation in the next 30 days.
Description
DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via Victim must visit the vulnerable page. This vulnerability appears to have been fixed in No fix yet.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Domainmod | Domainmod | >= 4.09.03, <= 4.11.01 |
References
- https://github.com/domainmod/domainmod/issues/80Exploit, Third Party Advisory
- https://github.com/domainmod/domainmod/issues/80Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-1000856?
How severe is CVE-2018-1000856?
How do I fix CVE-2018-1000856?
Are you affected by CVE-2018-1000856?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST