Description
Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO
in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CervantesSec | cervantes | alpha 0.3 ≤1.3-beta | — |