Security Advisory

CVE-2020-9012

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-16 20:00:41
Last updated 2024-08-04 10:19:18
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.