CVE-2020-35249 - CVE House
Back to Database
Status published Medium CVE-2020-35249

Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers...

Vulnerability Description

Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-35249

Credits & Attribution

No credits recorded in the NVD database.

References

More from elkarbackup

View All →
CVE-2020-24925
A Sensitive Source Code Path Disclosure vulnerability is found in...
High 7.5
CVE-2020-24924
A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3,...
Medium 5.4

Affected Vendor

elkarbackup

View all reports →

Affected Software

elkarbackup
Vulnerable Versions:
1.3.3

Timeline

Official Publish: November 2nd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.