A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-01-28T05:37:56
Updated: 2024-08-04T16:55:10.640Z
Reserved: 2020-12-11T00:00:00
Link: CVE-2020-35124
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-01-28T06:15:13.373
Modified: 2024-11-21T05:26:48.493
Link: CVE-2020-35124
Redhat
No data.