CVE-2019-25088

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the argument to_research leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/ytti/oxidized-web/commit/55ab9bdc68b03ebce9280b8746ef31d7fdedcc45Patch, Third Party Advisory
• https://github.com/ytti/oxidized-web/pull/195Patch, Third Party Advisory
• https://vuldb.com/?ctiid.216870Third Party Advisory
• https://vuldb.com/?id.216870Third Party Advisory
• https://github.com/ytti/oxidized-web/commit/55ab9bdc68b03ebce9280b8746ef31d7fdedcc45Patch, Third Party Advisory
• https://github.com/ytti/oxidized-web/pull/195Patch, Third Party Advisory
• https://vuldb.com/?ctiid.216870Third Party Advisory
• https://vuldb.com/?id.216870Third Party Advisory

Published

Dec 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25082Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25083Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25084A vulnerability, which was classified as problematic, has be…6.1
• CVE-2019-25085A vulnerability was found in GNOME gvdb. It has been classif…8.8
• CVE-2019-25086A vulnerability was found in IET-OU Open Media Player up to …5.4
• CVE-2019-25087A vulnerability was found in RamseyK httpserver. It has been…7.5
• CVE-2019-25089A vulnerability has been found in Morgawr Muon 0.1.1 and cla…7.5
• CVE-2019-2509Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2019-25090A vulnerability was found in FreePBX arimanager up to 13.0.5…6.1
• CVE-2019-25091A vulnerability classified as problematic has been found in …5.3
• CVE-2019-25092A vulnerability classified as problematic was found in Nakia…4.8
• CVE-2019-25093A vulnerability, which was classified as problematic, was fo…5.4