CVE-2020-19611

MediumCVSS 6.1

Published: 07/12/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

46th percentile - higher than 46% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability exists in the redirect module of Racktables version 0.21.2. An attacker can inject arbitrary web script or HTML via the op parameter.

Risk Assessment

The risk involves executing malicious scripts in the victim's browser, potentially leading to session theft, redirects to malicious sites, or data theft.

Recommendation

Update Racktables to the latest version that includes a fix for this vulnerability. If an update is not possible, apply input filtering for the op parameter.

Original NVD description (English source)

Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.