CVE-2017-20113

TrueConf Server Stored cross site scripting

CVSS 3.5 LOWEPSS 0.5%CWE-80

A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Affected products

TrueConf · Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://vuldb.com/?id.96627 https://www.exploit-db.com/exploits/41184/