CVE-2018-7997 Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.
MediumCVSS 6.1
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eramba | = e1.0.6.033 | No fix listed |
References
- medium.com exploit third-party-advisory