CVE-2020-13655

An issue was discovered in Collabtive 3.0 and later

published August 31, 2020

CVSS
—
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.6th percentile
Published
2020-08-31T14:19Z
EPSS history
Timeline
  • 31 AUG 14:19Z
    An issue was discovered in Collabtive 3.0 and later
    cvelistv5