CVE-2017-15039

Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting

published November 6, 2017

CVSS
—
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Published
2017-11-06T08:00Z
EPSS history
Timeline
  • 06 NOV 08:00Z
    Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting
    cvelistv5