Description
Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded.
Unscored
CVE-2019-12311
EUVD-2019-3948GHSA-3gjg-87w5-fmgx
Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded…
Published Nov 18, 2019 · Updated Aug 4, 2024 · Assigned by mitre