First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2019-15477

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Jooby before 1.6.4 has XSS via the default error handler.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Aug 23, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-154786.1Status Board 1.1.81 has reflected XSS via logic.ts.CVE-2019-154796.1Status Board 1.1.81 has reflected XSS via dashboard.ts.CVE-2019-154805.4Domoticz 4.10717 has XSS via item.Name.CVE-2019-154816.1Kimai v2 before 1.1 has XSS via a timesheet description.CVE-2019-154826.1selectize-plugin-a11y before 1.1.0 has XSS via the msg field.CVE-2019-154836.1Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.CVE-2019-154846.1Bolt before 3.6.10 has XSS via an image's alt or title field.CVE-2019-154856.1Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.CVE-2019-154866.1django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline.CVE-2019-154876.1DfE School Experience before v16333-GA has XSS via a teacher training URL.CVE-2019-154886.1Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.CVE-2019-154896.1laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS.

CVE-2019-15477: Medium severity, CVSS 6.1 | Vulnix