Skip to content
OpenAdvisories
Unscored CVE-2019-9538 EUVD-2019-18910GHSA-gjjv-943h-wj4x

Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

Published Jan 3, 2020 · Updated Aug 4, 2024 · Assigned by certcc

Vendor: Telos Product: Automated Message Handling System

Description

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.

Affected products

VendorProductAffectedFixed
Telos Automated Message Handling System unspecified – < 4.1.5.5 4.1.5.5

References