Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: apache
Published: 2020-04-01T18:18:48
Updated: 2024-08-04T06:53:59.927Z
Reserved: 2019-12-02T00:00:00
Link: CVE-2020-1943
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-04-01T19:15:14.563
Modified: 2024-11-21T05:11:40.287
Link: CVE-2020-1943
Redhat
No data.