CVE:CVE-2020-13418
CNNVD:CNNVD-202104-366
Github OpenIAM是Github开源的一个应用程序。开放式身份和访问管理。
OpenIAM 4.2.0.3之前版本存在跨站脚本漏洞，该漏洞允许在添加新用户特性中添加XSS。
solution:Upgrade openiam openiam to a higher version than 4.2.0.3,and avoid the version [4.1.0,4.2.0.3)
solution:Upgrade drupal entity_embed to a higher version than 8.x-1.0,8.x-1.0:alpha1,8.x-1.0:alpha2,8.x-1.0:alpha3,8.x-1.0:beta1,8.x-1.0:beta2,8.x-1.0:beta3,8.x-1.0:rc1,8.x-1.0:rc2,8.x-1.1,8.x-1.2,and avoid the version 8.x-1.0,8.x-1.0:alpha1,8.x-1.0:alpha2,8.x-1.0:alpha3,8.x-1.0:beta1,8.x-1.0:beta2,8.x-1.0:beta3,8.x-1.0:rc1,8.x-1.0:rc2,8.x-1.1,8.x-1.2