CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java.
CVE
CVE-2019-19329
Severity
MEDIUM
CVSS
6.1
EPSS
1.42%
Java
Original NVD Description
In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Related CVEs
Other vulnerabilities affecting the same vendor(s)