CVE-2019-9142 Moderate severity vulnerability that affects org.b3log:symphony
MediumCVSS 6.1
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.b3log/symphony(Maven) | < 3.4.7 | 3.4.7 |
| b3log symphony | < 3.4.7 | 3.4.7 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com vendor-advisory
- github.com product