CVE-2019-12311

Sandline Centraleyezer On Premises allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded...

CVE-2019-12311

CVE-2019-12311 affects Sandline Centraleyezer (On Premises). The issue is an unrestricted file upload vulnerability in Centraleyezer that allows uploading an HTML page containing a script, which can be loaded when a victim downloads a CISO Report template, leading to stored XSS. Multiple connecte...