CVE-2017-15039

Cross-site scripting XSS exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-16569: URL Redirection to Untrusted Site

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-15039: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

PT-2017-13827

Name of the Vulnerable Software and Affected Versions Zurmo version 3.2.1.57987acc3018 Description A cross-site scripting issue exists due to the improper handling of a data: URL in the redirectUrl parameter to "app/index.php/meetings/default/createMeeting" API endpoint. This allows for potential...

PT-2017-14453

Name of the Vulnerable Software and Affected Versions Zurmo version 3.2.1.57987acc3018 Description A redirect issue exists via an http: URL in the redirectUrl parameter to "app/index.php/meetings/default/createMeeting" endpoint. Recommendations For version 3.2.1.57987acc3018, avoid using the...