Security Advisory

CVE-2017-14923

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-29 07:00:00

Last updated 2024-08-05 19:42:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.

← Browse all CVEs View on cve.org ↗