CVE-2019-16935 Cross-site scripting in n/a
Attackers can execute arbitrary JavaScript in clients visiting the XML-RPC server if the server title is set with untrusted input.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-16935?
CVE-2019-16935 is a medium-severity cross-site scripting vulnerability in Canonical Ubuntu Linux, published on 28 Sep 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
Weakness: CWE-79
Which versions are affected by CVE-2019-16935?
It affects 3 products.
Linux distribution packages (32)
python Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python-debug Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python-devel Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python-libs Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python-test Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python-tools Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
tkinter Red Hat:enterprise_linux:7::client | All versions | 0:2.7.5-89.el7 |
python Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python-debug Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python-libs Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python-test Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python-tools Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
tkinter Red Hat:enterprise_linux:7::computenode | All versions | 0:2.7.5-89.el7 |
python Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python-debug Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python-devel Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python-libs Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python-test Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python-tools Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
tkinter Red Hat:enterprise_linux:7::server | All versions | 0:2.7.5-89.el7 |
python Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
python-debug Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
python-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
python-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
python-libs Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
python-test Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
python-tools Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
tkinter Red Hat:enterprise_linux:7::workstation | All versions | 0:2.7.5-89.el7 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Python Python.
How do I fix CVE-2019-16935?
Upgrade to a fixed version.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2019-16935 being exploited?
There is no known exploitation of CVE-2019-16935 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2019-16935, CLEANSTART-2026-QJ43408, DEBIAN-CVE-2019-16935, GHSA-qhmv-wcg2-h8hx, PSF-2019-6, RHSA-2020:3911 and 1 more.