CVE-2019-19370

A cross-site scripting XSS vulnerability in the web conferencing component of the Mitel MiCollab application before 9.0.15 for Android could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation in the file upload interface. A...

CVE-2019-19370

The CVE-2019-19370 affects Mitel MiCollab for Android prior to version 9.0.15. It is a reflected XSS in the web conferencing component caused by insufficient validation in the file upload interface, allowing an unauthenticated attacker to execute arbitrary scripts. No explicit exploitation detail...