CVE-2020-26517

A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4

published June 8, 2021

CVSS
—
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to perform XSS attacks through using the WebDAV functionality to upload files to a project (Authn users), using the users import functionality (Admin only), and changing the login text in the application configuration (Admin only).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00542 · 44.8th percentile
Published
2021-06-08T12:42Z
EPSS history
Timeline
  • 08 JUN 12:42Z
    A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4
    cvelistv5