cve/2019/CVE-2019-19913.md

CVE-2019-19913

Description

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.

POC

Reference

• http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html
• http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2020/Apr/9
• http://seclists.org/fulldisclosure/2020/Apr/9

Github

No PoCs found on GitHub currently.