Unscored CVE-2020-13116 EUVD-2020-5392GHSA-4mfr-jgjm-cvx8

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation.

Published Jan 12, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation.

References

https://support.carbonite.com/evault/articles/Cross-site-scripting-vulnerability-in-Carbonite-Server-Backup-Portal-policies-functionality