BSSA-2022-04

Revision as of 17:40, 11 November 2022 by Mglaser (talk | contribs)
Date 2022-11-08
Severity Low
Affected BlueSpice 4.x
Fixed in BlueSpice 4.2.1
CVE

Problem

Logged in users are able to inject arbitrary HTML (XSS) into several locations in the main interface by editing their user preferences.

Solution

Upgrade to BlueSpice 4.2.1

Acknowledgements

Found during an internal security audit.

Retrieved from "https://en.wiki.bluespice.com/w/index.php?title=Security:Security_Advisories/BSSA-2022-04&oldid=5223"
No categories assignedEdit

Discussions