CVE-2017-2674

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are no...

CVE-2017-2674

CVE-2017-2674 affects Red Hat JBoss BRMS 6 and BPM Suite 6 prior to 6.4.3. The vulnerability is a stored XSS in Business Central caused by insufficient sanitation of user input when creating new lists. An remote authenticated attacker with privileges to create lists can store scripts in those lis...