CVE-2020-12685

published 2020-05-15

CVE-2020-12685: XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
redhat	interchange	>= 4.7.0 < 5.12.0	5.12.0

CWE-79