icon

We found results for “

WS-2019-0361

Good to know:

icon
icon

Date: September 9, 2019

All WS profiles in RVI (ready status) + WR filtered All WS profiles in RVI (ready status) + WR filtered 100% 10 WS-2019-0352 1 of 1 Context: EZR2 WS-2019-0352 Smartbanner.js before v1.14.1 is vulnerable when clicking on 'view link' as a result of the referrer information being exposed when the link is clicked. Also there is not restriction for accessing the origin page. Screen reader support enabled. Smartbanner.js before v1.14.1 is vulnerable when clicking on 'view link' as a result of the referrer information being exposed when the link is clicked. Also there is not restriction for accessing the origin page.

Language: JS

Severity Score

Severity Score

Weakness Type (CWE)

Improper Access Control

CWE-284

Files or Directories Accessible to External Parties

CWE-552

Top Fix

icon

Upgrade Version

Upgrade to version v1.14.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

Do you need more information?

Contact Us