CVE-2020-26884

https://notcve.org/view.php?id=CVE-2020-26884

18 Nov 2020 — RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user into executing malicious JavaScript code in the context of the web application. RSA Archer versiones 6.8 hasta 6.8.0.3 y 6.9, contiene una vulnerabilidad de inyección URL. Un atacante no autenticado remoto podría explotar esta vulnerabilidad al engañar a un usuario de la aplicación víctima a ejecutar código J... • https://community.rsa.com/docs/DOC-114997 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •