Centraleyezer Security Vulnerabilities

CVE-2019-12271

Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server...

CVE-2019-12299

Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category...

CVE-2019-12311

Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is...