CVE-2020-9055

Summary

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.

Affected Software

Weaknesses

• CWE-79: CWE-79 Cross-site Scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

• https://kb.cert.org/vuls/id/962085/
• https://csp.poha.com/lynx/

References

• https://kb.cert.org/vuls/id/962085/
• https://csp.poha.com/lynx/

• ←Previous
• Next→