CVE-2019-8939

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-02-19

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Tautulli (Tautulli)

References

• http://www.securityfocus.com/bid/107171
• https://github.com/Tautulli/Tautulli-Issues/issues/161