CVE-2019-1020003

invenio-records before 1.2.2 allows XSS.

Score

CVSS 3.0 5.4 Medium

Status

Modified - josh@bress.net

Published

2019-07-29

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Invenio-records (Invenio)
• Invenio-records (Inveniosoftware)

References

• https://github.com/inveniosoftware/invenio-records/security/advisories/GHSA-vxh3-mvv7-265j