CVE-2020-13969

CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter

published December 23, 2020

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00668 · 51.3th percentile
Published
2020-12-23T17:20Z
EPSS history
Timeline
  • 23 DEC 17:20Z
    CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter
    cvelistv5