ibm collaborative_lifecycle_management 在web页面生成时对输入的转义处理不恰当(跨站脚本)
CVE编号
CVE-2019-4748
利用情况
暂无
补丁情况
N/A
披露时间
2020-07-17
漏洞描述
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.