CVE-2019-20520

ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI

High · published March 19, 2020

CVSS v3.0
7.4
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00786 · 55.7th percentile
Published
2020-03-19T17:52Z
EPSS history
Timeline
  • 19 MAR 17:52Z
    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI
    cvelistv5