3 matches found
CVE-2019-1020019
invenio-previewer before 1.0.0a12 allows XSS...
CVE-2019-1020019
invenio-previewer before 1.0.0a12 allows XSS...
CVE-2019-1020019
CVE-2019-1020019 affects the Invenio-Previewer component. The connected documents confirm a cross-site scripting (XSS) vulnerability in invenio-previewer versions prior to 1.0.0a12, caused by insufficient validation of client-side data by the WEB application. Exploitation would enable injection o...