Security Advisory

CVE-2020-15788

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-09 18:11:42

Last updated 2024-08-04 13:22:30

Assigner siemens

State PUBLISHED

Description

A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g. by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user’s client. Various actions could be triggered by running malicious JavaScript code.

← Browse all CVEs View on cve.org ↗