CVE-2020-1771

CVE-2020-1771

Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: ((OTRS)) Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

Source: CVE-2020-1771

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다