CVE-2019-10779

All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting. An attacker website is able to load the Stroom UI into a hidden iframe. Using that iframe, the attacker site can issue commands to the Stroom UI via an XSS vulnerability to take full control of the Stroom UI on behalf of the logged-in user.

• CWE-79

• https://snyk.io/vuln/SNYK-JAVA-STROOM-541182Exploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-JAVA-STROOM-541182Exploit, Third Party Advisory

Published

Jan 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10773In Yarn before 1.21.1, the package install functionality can…7.8
• CVE-2019-10774php-shellcommand versions before 1.6.1 have a command inject…9.8
• CVE-2019-10775ecstatic have a denial of service vulnerability. Successful …7.5
• CVE-2019-10776In "index.js" file line 240, the run command executes the gi…9.8
• CVE-2019-10777In aws-lambda versions prior to version 1.0.5, the "config.F…9.8
• CVE-2019-10778devcert-sanscache before 0.4.7 allows remote attackers to ex…9.8
• CVE-2019-1078An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-10780BibTeX-ruby before 5.1.0 allows shell command injection due …9.8
• CVE-2019-10781In schema-inspector before 1.6.9, a maliciously crafted Java…9.8
• CVE-2019-10782All versions of com.puppycrawl.tools:checkstyle before 8.29 …5.3
• CVE-2019-10783All versions including 0.0.4 of lsof npm module are vulnerab…9.8
• CVE-2019-10784phppgadmin through 7.12.1 allows sensitive actions to be per…9.6