CVE-2018-1000856 — MEDIUM (4.8)

Q: How severe is CVE-2018-1000856?

CVE-2018-1000856 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2018-1000856?

Check the references section above for vendor advisories and patch information. Affected products include: Domainmod Domainmod.

Vulnerability Description

DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via Victim must visit the vulnerable page. This vulnerability appears to have been fixed in No fix yet.

CVSS Score

4.8

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Domainmod	Domainmod	>= 4.09.03, <= 4.11.01

Related Weaknesses (CWE)

CWE-79

References

https://github.com/domainmod/domainmod/issues/80ExploitThird Party Advisory
https://github.com/domainmod/domainmod/issues/80ExploitThird Party Advisory

FAQ

What is CVE-2018-1000856?

CVE-2018-1000856 is a vulnerability with a CVSS score of 4.8 (MEDIUM). DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbit...

How severe is CVE-2018-1000856?

CVE-2018-1000856 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1000856?

Check the references section above for vendor advisories and patch information. Affected products include: Domainmod Domainmod.