CVE-2019-8939

NONE EPSS 61.2%
Published Feb 19, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 19, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.

Threat Intelligence

EPSS Exploit Probability
61.2% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
tautullitautulli2.1.26any

References 2

  • securityfocus.com http://www.securityfocus.com/bid/107171
    Third Party AdvisoryVDB Entry
  • github.com https://github.com/Tautulli/Tautulli-Issues/issues/161
    ExploitPatchThird Party Advisory

Remediation

  • github.com https://github.com/Tautulli/Tautulli-Issues/issues/161
    ExploitPatchThird Party Advisory