Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-14920
4.3
MEDIUMCVSS v2
Published
September 30, 2017
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript via the User-Agent HTTP header, which is mishandled during rendering by the application administrator.
EGroupware/egroupware
GitHubWeb based groupware server written in PHP, forum at https://help.egroupware.org/
GitHubWeb based groupware server written in PHP, forum at https://help.egroupware.org/<= 16.1.20170703, < 16.1.20170922NVD
egroupware/egroupware
PackagistEGroupware extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office.
PackagistEGroupware extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office.<= 16.1.20170703, < 16.1.20170922NVD