CVE-2019-20008

Summary

In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/archerysec/archerysec/issues/338
• https://github.com/archerysec/archerysec/releases/tag/v1.3
• https://github.com/archerysec/archerysec/compare/archerysec-v1.2…v1.3

References

• https://github.com/archerysec/archerysec/issues/338
• https://github.com/archerysec/archerysec/releases/tag/v1.3
• https://github.com/archerysec/archerysec/compare/archerysec-v1.2…v1.3

• ←Previous
• Next→