CVE-2020-37018: GOautodial 4.0 - Persistent Cross-Site Scripting
GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through message subjects. Attackers can craft messages with embedded JavaScript that will execute when an administrator reads the message, potentially stealing session cookies or executing client-side attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37018?
CVE-2020-37018 is considered a medium severity vulnerability due to its potential impact on user security through persistent cross-site scripting.
How do I fix CVE-2020-37018?
To fix CVE-2020-37018, update your GOautodial application to the latest version where the vulnerability has been patched.
Who is affected by CVE-2020-37018?
CVE-2020-37018 affects authenticated agents using GOautodial 4.0, allowing them to inject malicious scripts.
What type of vulnerability is CVE-2020-37018?
CVE-2020-37018 is a persistent cross-site scripting (XSS) vulnerability that allows script injection through message subjects.
Can CVE-2020-37018 be exploited remotely?
Yes, CVE-2020-37018 can be exploited remotely by attackers who can send crafted messages to the application.