CVE-2020-6845

An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2020-02-18

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Olk Webstore (Topmanage)

References

• https://websec.nl/news.php
• https://www.exploit-db.com/exploits/47960