PT-2020-20463
CVE-2020-9055
·
تاريخ النشر
2020-03-30
·
تاريخ التحديث
2020-04-01
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Versiant LYNX Customer Service Portal (CSP) version 3.5.2
Description
The issue allows a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user, potentially leading to website redirects, session cookie hijacking, or information disclosure.
Recommendations
For version 3.5.2, update to a version that includes a fix for the stored cross-site scripting issue to prevent malicious JavaScript from being inserted and displayed to the end user.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾