CVE-2020-25398

CVE-2020-25398 CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. Information Description: Attacker can configure specific data, which could be exported to malicious csv file with code execution payload and runs after opening on user's machine...

CVE-2020-25399

CVE-2020-25399 Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. Information Description: Attacker can send malicious file to any user using chat functional. File may contain js payload, which executes in...

EUVD-2020-18085

Malware in sbrugna...

EUVD-2020-18086

Malware in sbrugna...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

Cross site scripting

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25398

CVE-2020-25398 affects InterMind iMind Server up to version 3.13.65, via the csv export function. The root cause is CSV Injection in exported CSV data. CVSS-3.1 vector indicates Network attack, high impact to confidentiality, integrity, and availability (base 8.8). Practical exploitation details ...

CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

CVE-2020-25399

CVE-2020-25399 affects InterMind iMind Server up to version 3.13.65. The issue is a Stored XSS in the chat file handling that allows any user to hijack another user’s session. Documents do not specify the exact vulnerable component or root cause details beyond the stored XSS in chat. Impact is de...

CVE-2020-25398: Improper Neutralization of Formula Elements in a CSV File

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

CVE-2020-25399: Improper Neutralization of Input During Web Page Generation

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...

PT-2020-16077

Name of the Vulnerable Software and Affected Versions InterMind iMind Server versions through 3.13.65 Description The issue allows any user to hijack another user's session by sending a malicious file in the chat, due to a stored XSS vulnerability. Recommendations For versions through 3.13.65,...

PT-2020-16076

Name of the Vulnerable Software and Affected Versions InterMind iMind Server versions through 3.13.65 Description The issue exists in the csv export functionality, allowing for CSV Injection. Recommendations For versions through 3.13.65, update to a version that contains a fix for this issue, as...

CVE-2020-24765

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request...

Server side request forgery (ssrf)

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request...