Security Advisory
CVE-2020-22790
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs.