CVE-2017-14920

Published: 2017-09-30T01:29Z

Last Modified: 2024-11-21T03:13Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript via the User-Agent HTTP header, which is mishandled during rendering by the application administrator. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt