CVE-2019-14472

概要

参考情報

• code610.blogspot.com/2019/07/xss-in-zurmo-crm.html · Exploit

zurmo のその他の脆弱性

• CVE-2018-19596中 4.8Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.
• CVE-2018-19506中 4.8Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.