Medium · 6.1 CVE-2019-9142 EUVD-2019-0396GHSA-xgjc-49cw-529m

Moderate severity vulnerability that affects org.b3log:symphony

Published Feb 25, 2019 · Updated Sep 16, 2024 · Assigned by mitre

Package: org.b3log:symphony Ecosystem: Maven

Description

An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.b3log:symphony	< 3.4.7	3.4.7	GHSA-xgjc-49cw-529m

References

https://github.com/b3log/symphony/issues/860