CVE-2020-1943

Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07

published April 1, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.9th percentile for exploit probability.

CVSS
—
EPSS
97%
Percentile
99.9
In the wild
Unconfirmed
What it is

Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.97309 · 99.9th percentile
Published
2020-04-01T18:18Z
EPSS history
Timeline
  • 01 APR 18:18Z
    Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07
    cvelistv5