Security Advisory

CVE-2019-18982

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-15 04:22:34

Last updated 2024-08-05 02:02:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.

← Browse all CVEs View on cve.org ↗