{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-03T22:55:38.097","vulnerabilities":[{"cve":{"id":"CVE-2018-1000642","sourceIdentifier":"cve@mitre.org","published":"2018-08-20T19:31:37.777","lastModified":"2024-11-21T03:40:18.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3."},{"lang":"es","value":"FlightAirMap en versiones v1.0-beta.21 y anteriores contiene una vulnerabilidad Cross-Site Scripting (XSS) en la variable GET utilizada en el submenú de la página de registro, lo que puede provocar acciones no autorizadas y el acceso a datos, robando información de sesión. La vulnerabilidad parece haber sido solucionada tras el commit con ID 22b09a3."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"FB6007F3-E745-42EC-B283-BE3C3AA9E2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"C308E338-FE82-4044-A269-EF14885083E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:0.5:beta1:*:*:*:*:*:*","matchCriteriaId":"D42EAC5E-C3E0-422B-8C0B-54A5FF9839D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:0.6:beta1:*:*:*:*:*:*","matchCriteriaId":"FF6AE053-5341-442B-99D9-FF009EE7B107"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"079915C1-C5C0-40F5-B634-F685FEFDBBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta10:*:*:*:*:*:*","matchCriteriaId":"1D486A54-A2FD-4A88-91FE-0071A0433A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta11:*:*:*:*:*:*","matchCriteriaId":"9C0325AE-E6EE-42C8-8E8D-284F32B9DE20"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta12:*:*:*:*:*:*","matchCriteriaId":"A67F6F4E-AF94-4447-AC60-53D9909FD68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta13:*:*:*:*:*:*","matchCriteriaId":"343C0BB3-92C0-4CFB-834F-409D3B274EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta14:*:*:*:*:*:*","matchCriteriaId":"7D0241E8-0B10-4F06-9713-B76F3A5C40A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta15:*:*:*:*:*:*","matchCriteriaId":"0A09496E-85EB-4B67-B334-089CEC2E7646"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta16:*:*:*:*:*:*","matchCriteriaId":"7E330E1E-6C8B-4848-B0B5-A4BCED5E9C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta17:*:*:*:*:*:*","matchCriteriaId":"6EAB5786-60C9-4F70-B37D-989939283E56"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta18:*:*:*:*:*:*","matchCriteriaId":"34A900C1-039D-4202-869C-145FD4CE7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta19:*:*:*:*:*:*","matchCriteriaId":"D99AB17F-DF9F-44F4-BEFF-CD06DBB6BBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C9EE05C5-25D0-47BB-8DC0-1F2566B9BB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta20:*:*:*:*:*:*","matchCriteriaId":"AFFBF007-782A-4191-A0B3-09FC1D696CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta21:*:*:*:*:*:*","matchCriteriaId":"4C840237-3B9E-48CB-B30D-515DAA8D1DD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"E0E90C57-4A93-4F64-8A7E-C81234BDDC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"70F464E7-F170-4DA4-A4E5-B2797A5CB717"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta5:*:*:*:*:*:*","matchCriteriaId":"F562B7E7-4CB2-4D00-BAF9-3E05D0B6EF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta6:*:*:*:*:*:*","matchCriteriaId":"B4DE3F8E-90C0-48EA-9180-B38C742F776E"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FAD8B924-8E7C-47AB-8C7E-145184A36BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta8:*:*:*:*:*:*","matchCriteriaId":"892A72F6-3789-4741-A0A2-AD9FB871C4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:flightairmap:flightairmap:1.0:beta9:*:*:*:*:*:*","matchCriteriaId":"F66EA5D8-FF0C-4C2B-BDF3-9E3D4E23A396"}]}]}],"references":[{"url":"https://0dd.zone/2018/08/05/FlightAirMap-Reflected-XSS/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/Ysurac/FlightAirMap/issues/410","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://0dd.zone/2018/08/05/FlightAirMap-Reflected-XSS/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/Ysurac/FlightAirMap/issues/410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}