PT-2020-16077
CVE-2020-25399
·
Published
2020-11-05
·
Updated
2021-07-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
InterMind iMind Server versions through 3.13.65
Description
The issue allows any user to hijack another user's session by sending a malicious file in the chat, due to a stored XSS vulnerability.
Recommendations
For versions through 3.13.65, update to a version that contains a fix for this issue to prevent session hijacking.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾