CVE-2020-26517 - CVE House
Back to Database
Status published Medium CVE-2020-26517

A cross-site scripting (XSS) issue was discovered in Intland codeBeamer...

Vulnerability Description

A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to perform XSS attacks through using the WebDAV functionality to upload files to a project (Authn users), using the users import functionality (Admin only), and changing the login text in the application configuration (Admin only).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26517

Credits & Attribution

No credits recorded in the NVD database.

References

More from intland

View All →
CVE-2020-26516
A CSRF issue was discovered in Intland codeBeamer ALM 10.x...
High 8.8
CVE-2020-26515
An insufficiently protected credentials issue was discovered in Intland codeBeamer...
High 7.5
CVE-2020-26513
An issue was discovered in Intland codeBeamer ALM 10.x through...
Medium 5.5
CVE-2019-20635
codeBeamer before 9.5.0-RC3 does not properly restrict the ability to...
Medium 6.1
CVE-2019-19913
In Intland codeBeamer ALM 9.5 and earlier, there is stored...
Medium 4.8

Affected Vendor

Affected Software

codebeamer
Vulnerable Versions:
10.0.0, 10.0.1, 10.1.0, 21.04

Timeline

Official Publish: June 8th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.