Lucene search

K
osvGoogleOSV:CVE-2020-35124
HistoryJan 28, 2021 - 6:15 a.m.

CVE-2020-35124

2021-01-2806:15:13
Google
osv.dev
1

5.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.

5.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%