Security Advisory

CVE-2017-14921

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-09-29 07:00:00

Last updated 2024-08-05 19:42:22

Assigner mitre

State PUBLISHED

Description

Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.

← Browse all CVEs View on cve.org ↗