Cross site scripting

In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...

CVE-2020-5393

CVE-2020-5393 affects Appspace On-Prem (up to 7.1.3). A Cross-Site Scripting (XSS) flaw can enable an attacker to steal session tokens. The CNVD entry for Appspace On-Prem Cross-Site Scripting Vulnerability corroborates the XSS vector, but the provided documents do not specify affected subcompone...

CVE-2020-5393

In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...

CVE-2020-5393: Improper Neutralization of Input During Web Page Generation

In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...