Unscored CVE-2020-5570 EUVD-2020-26732GHSA-cmg6-rw28-2jcx

Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arb…

Published Apr 28, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: NI Consulting Product: Sales Force Assistant

Description

Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NI Consulting	Sales Force Assistant	version 11.2.48 and earlier	—

References

http://ni-consul.jp/support/info/2020/20200424_ge.html
https://jvn.jp/en/jp/JVN47668991/index.html
JVN#47668991 third-party-advisory