← CVE Intelligence

CVE-2020-1943

Apache / Apache OFBiz PUBLISHED

Description (CNA)

Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

Affected (CNA)

Vendor / productVersions
Apache / Apache OFBizaffected 16.11.01 to 16.11.07

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.