CVE-2020-15788

MEDIUM

Polarion Subversion Webclient - Cross-Site Scripting via Malicious URL Input

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g. by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user’s client. Various actions could be triggered by running malicious JavaScript code.

References (1)

Core 1
Core References

Scores

CVSS v3 6.1
EPSS 0.0036
EPSS Percentile 58.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-80 CWE-79
Status published
Products (1)
siemens/polarion_subversion_webclient
Published Sep 09, 2020
Tracked Since Feb 18, 2026