Security Advisory
CVE-2020-25104
5.4
MEDIUM
Vulnerability Description
eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.
Published Date
September 3, 2020
Official Source
NIST NVD Advisory