CVE-2020-15788CWE-80

A vulnerability has been identified in Polarion Subversion Webclient (All versions)

published September 9, 2020

CVSS
—
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g. by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user’s client. Various actions could be triggered by running malicious JavaScript code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.4th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2020-09-09T18:11Z
EPSS history
Timeline
  • 09 SEP 18:11Z
    A vulnerability has been identified in Polarion Subversion Webclient (All versions)
    cvelistv5