CVE-2020-25104

eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object

published September 3, 2020

CVSS
—
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00576 · 46.8th percentile
Published
2020-09-03T14:20Z
EPSS history
Timeline
  • 03 SEP 14:20Z
    eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object
    cvelistv5