Code injection

2019-07-1012:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

26.7%

An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.

CPENameOperatorVersion
eventumle3.5.0

CPE	Name	Operator	Version
	eventum	le	3.5.0

References

github.com/eventum/eventum/blob/master/CHANGELOG.md

github.com/eventum/eventum/releases/tag/v3.5.2

0.001 Low

EPSS

Percentile

26.7%

Related for PRION:CVE-2018-12627