PT-2024-33283 · Znuny+1 · Znuny+1
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Znuny versions prior to 6.5.1 through 6.5.10
Znuny versions 7.0.1 through 7.0.16
Description
The issue allows for XSS, where JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
Recommendations
For versions prior to 6.5.1 through 6.5.10, update to version 6.5.1 or later.
For versions 7.0.1 through 7.0.16, update to a version later than 7.0.16.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Znuny