VYPR

Maven package

org.b3log/symphony

pkg:maven/org.b3log/symphony

Vulnerabilities (1)

  • CVE-2019-9142Feb 25, 2019
    affected < 3.4.7fixed 3.4.7

    An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.