CVE-2018-20663
1 advisory.
Maven/com.haulmont.cuba:cuba-web-toolkit CVE-2018-20663: medium 5.4
The Reporting Addon for CUBA Platform has Persistent XSS
Action: Upgrade com.haulmont.cuba:cuba-web-toolkit to 6.8.15 (6.8.x), 6.9.8 (6.9.x) or 6.10.7 (6.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.10.0 | 6.10.7 | - |
| 6.9.0 | 6.9.8 | - |
| 0 | 6.8.15 | - |
Fixed versions
| 6.10.7 | 6.9.8 | 6.8.15 |
Sources
- osv: GHSA-rff7-964g-pppx
- https://nvd.nist.gov/vuln/detail/CVE-2018-20663
- https://github.com/cuba-platform/cuba/issues/1741
- https://github.com/cuba-platform/reports/issues/140
- https://github.com/cuba-platform/cuba/commit/be6aa41ff36a365e2a995d37861e5acfcd32c2c5
- https://github.com/cuba-platform/cuba/commit/e9f972beeae42dc6dbc3aaa6b6ecc9814c0eedb4
- https://github.com/cuba-platform/cuba/commit/ec8784d8f596aa570604f4e5d5d4a7c3ae264c62
- https://github.com/cuba-platform/reports
CVE-2018-20663 · published · modified · JSON