CVE-2020-24445: Adobe Systems Incorporated Experience Manager, XSS

Описание

Оригинално описание

AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

Засегнати продукти

• Adobe Systems Incorporated Experience Manager: <= 6.5.6.0; <= AEM Cloud Service

Вид слабост

• CWE-79 XSS

История

Други уязвимости в Adobe Systems Incorporated Experience Manager

• CVE-2017-3107
• CVE-2017-3108
• CVE-2017-3110

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-24445
• https://nvd.nist.gov/vuln/detail/CVE-2020-24445
• https://helpx.adobe.com/security/products/experience-manager/apsb20-72.html