Jedox 2020.2.5 Cross Site Scripting

Posted on 05 May 2023

Jedox version 2020.2.5 has a persistent cross site scripting vulnerability that allows remote authenticated users to inject arbitrary web scripts or HTML in the logs page via the log module.