i-doit CMDB <= 1.14.2 Multiple Vulnerabilities

i-doit CMDB is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-13825

CVE-2020-13825 affects i-doit CMDB version 1.14.2, where a cross-site scripting (XSS) flaw exists in the web UI through parameters such as viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode. The vulnerability arises from insufficient input handling that allows an attacker to inject a...