Skip to content

CVE-2017-14923 Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by....

MediumCVSS 5.4 EPSS 0.93%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.

Affected products

ProductAffected versionsFixed in
tine20 tine 2.0 <= 2017.08.3 No fix listed

References

  • openwall.com mailing-list patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch release-notes third-party-advisory