CVE-2019-1569 Cross-site scripting in Palo Alto Networks Expedition Migration Tool
An authenticated attacker can inject arbitrary JavaScript or HTML into the admin user mapping settings, potentially leading to session hijacking or code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-1569?
CVE-2019-1569 is a medium-severity cross-site scripting vulnerability in Palo Alto Networks Expedition Migration Tool, published on 26 Mar 2019. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.
Weakness: CWE-79
Which versions are affected by CVE-2019-1569?
It affects 1 product.
Products include Paloaltonetworks Expedition.
How do I fix CVE-2019-1569?
No fix has been published for CVE-2019-1569 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2019-1569 being exploited?
There is no known exploitation of CVE-2019-1569 in the wild and no public exploit code.
Other vulnerabilities in Palo Alto Networks Expedition Migration Tool
- CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection
- CVE-2024-5910 Palo Alto Networks Expedition Missing Authentication
- CVE-2024-9465 Palo Alto Networks Expedition SQL Injection
- CVE-2018-10143 Command injection in Palo Alto Networks Expedition
- CVE-2024-9464 Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
Sources
Also known as GHSA-9pjf-9xvp-88xx.