Beveiligingsadvies

CVE-2020-9055

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-30 20:50:27
Laatst bijgewerkt 2024-09-16 16:47:42
Toegewezen door certcc
CVSS-score 3.9
Status PUBLISHED

Beschrijving

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.