| Package | Affected versions | Patched versions |
|---|---|---|
| fme server | = 2019.0= 2019.1= 2019.2= 2020.0 |
Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free