Description
The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.haulmont.cuba:cuba-web-toolkit | >= 6.10.0, < 6.10.7 | 6.10.7 | GHSA-rff7-964g-pppx |
| Maven | com.haulmont.cuba:cuba-web-toolkit | >= 6.9.0, < 6.9.8 | 6.9.8 | GHSA-rff7-964g-pppx |
| Maven | com.haulmont.cuba:cuba-web-toolkit | < 6.8.15 | 6.8.15 | GHSA-rff7-964g-pppx |