PT-2022-20500
CVE-2022-31063
·
تاريخ النشر
2022-06-29
·
تاريخ التحديث
2022-07-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Tuleap versions prior to 13.9.99.111
Description
The issue arises from the improper escaping of a document's title in the search result of the MyDocmanSearch widget and in the administration page of locked documents. This could allow a malicious user, who has the capability to create a document, to force a victim to execute uncontrolled code.
Recommendations
For versions prior to 13.9.99.111, upgrade to a version that contains the fix for this issue.
At the moment, there is no information about other mitigation measures for this issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾