CVE-2019-14472

Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...

CVE-2019-14472

Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...

CVE-2019-14472

CVE-2019-14472 affects Zurmo 3.2.7-2, with a cross-site scripting (XSS) vulnerability exploitable through the PATH_INFO entry (app/index.php/zurmo/default). The root cause, as reflected in CNVD-2019-26160, Red Hat and CNVD entries, points to insufficient input/data validation that allows injectio...