CVE:CVE-2019-11454
CNNVD:CNNVD-201904-1001
Tildeslash Monit是挪威Tildeslash公司的一款用于管理和监控Unix和Linux系统的小型开源实用程序。
Tildeslash Monit 5.25.3之前版本中的http/cervlet.c文件存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade mmonit monit to a higher version than 5.25.3,and avoid the version (,5.25.3); Upgrade canonical ubuntu_linux to a higher version than 18.10,19.04,and avoid the version 18.10,19.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32