Design/Logic Flaw

2017-12-3119:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.0%

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.

CPENameOperatorVersion
zurmo_crmeq3.2.3

CPE	Name	Operator	Version
	zurmo_crm	eq	3.2.3

References

bitbucket.org/zurmo/zurmo/issues/436/to-report-a-xss-security-vulnerability-in

0.001 Low

EPSS

Percentile

25.0%

Related for PRION:CVE-2017-18004