CVE-2020-25399

CVE-2020-25399 InterMind iMind Server 至 3.13.65 版本中存在存储型 XSS 漏洞，允许任何用户通过聊天功能发送恶意文件来劫持其他用户的会话。 信息 描述：攻击者可利用聊天功能向任何用户发送恶意文件。文件可能包含 JS 负载，在受害者打开文件后于其浏览器中执行。 研究人员：Andrey Skuratov https://github.com/h3llraiser/ 发现日期：2020-07-06（初始公告） 公开发布： VEL 链接：即将提供 NIST CVE 链接：即将提供 截图：...

CVE-2020-25398

CVE-2020-25398 Existe una inyección CSV en InterMind iMind Server hasta la versión 3.13.65 a través de la funcionalidad de exportación CSV. Información Descripción: Un atacante puede configurar datos específicos, que podrían exportarse a un archivo csv malicioso con una carga útil de ejecución de...

EUVD-2020-18086

Malware in sbrugna...

EUVD-2020-18085

Malware in sbrugna...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

Cross site scripting

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

Design/Logic Flaw

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25398

CVE-2020-25398 affects InterMind iMind Server up to version 3.13.65, via the csv export function. The root cause is CSV Injection in exported CSV data. CVSS-3.1 vector indicates Network attack, high impact to confidentiality, integrity, and availability (base 8.8). Practical exploitation details ...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25399

CVE-2020-25399 affects InterMind iMind Server up to version 3.13.65. The issue is a Stored XSS in the chat file handling that allows any user to hijack another user’s session. Documents do not specify the exact vulnerable component or root cause details beyond the stored XSS in chat. Impact is de...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25399: Improper Neutralization of Input During Web Page Generation

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25398: Improper Neutralization of Formula Elements in a CSV File

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-24765

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request...

CVE-2020-24765

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request...