Cross site scripting

2020-01-0716:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.

CPENameOperatorVersion
on-premle7.1.3

CPE	Name	Operator	Version
	on-prem	le	7.1.3

References

docs.appspace.com/latest/release-notes/7-1-platform-release-notes/

sumukh30.blogspot.com/2020/01/cross-site-scripting-vulnerability-in.html