What is GHSA-rff7-964g-pppx?

GHSA-rff7-964g-pppx is a security advisory published by GitHub Security Advisories with Medium severity. The Reporting Addon for CUBA Platform has Persistent XSS

Which CVE IDs does GHSA-rff7-964g-pppx cover?

GHSA-rff7-964g-pppx covers the following CVE IDs: CVE-2018-20663. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rff7-964g-pppx?

GHSA-rff7-964g-pppx has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-rff7-964g-pppx?

GHSA-rff7-964g-pppx affects 3 products, including: maven/com.haulmont.cuba:cuba-web-toolkit:\u003e= 6.10.0, \u003c 6.10.7; maven/com.haulmont.cuba:cuba-web-toolkit:\u003e= 6.9.0, \u003c 6.9.8; maven/com.haulmont.cuba:cuba-web-toolkit:\u003c 6.8.15.

GHSA-rff7-964g-pppxMediumCVSS 5.4

The Reporting Addon for CUBA Platform has Persistent XSS

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 22, 2025

🔗 CVE IDs covered (1)

CVE-2018-20663 →

📋 Description

The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.

🎯 Affected products3

maven/com.haulmont.cuba:cuba-web-toolkit:>= 6.10.0, < 6.10.7
maven/com.haulmont.cuba:cuba-web-toolkit:>= 6.9.0, < 6.9.8
maven/com.haulmont.cuba:cuba-web-toolkit:< 6.8.15

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2018-20663
https://github.com/cuba-platform/reports/issues/140
https://github.com/cuba-platform/cuba/issues/1741
https://github.com/cuba-platform/cuba/commit/be6aa41ff36a365e2a995d37861e5acfcd32c2c5
https://github.com/cuba-platform/cuba/commit/e9f972beeae42dc6dbc3aaa6b6ecc9814c0eedb4
https://github.com/cuba-platform/cuba/commit/ec8784d8f596aa570604f4e5d5d4a7c3ae264c62
https://github.com/advisories/GHSA-rff7-964g-pppx