CVE-2020-13655

An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected...

CVE-2020-13655

CVE-2020-13655 affects Collabtive 3.0 and later. The issue is an XSS in managefile.php where, when action equals movefile and id corresponds to a project the user can access, the file and target parameters are reflected. This is a client-side scripting vulnerability that could enable code executi...