Cross-Site Scripting Vulnerability in Documize API by Documize
CVE-2019-19619

6.1MEDIUM

Key Information:

Vendor: Documize
Status: Documize
Vendor: CVE Published:; 6 December 2019

What is CVE-2019-19619?

Inversions in the way Documize processes untrusted Markdown content prior to version 3.5.1 create opportunities for Cross-Site Scripting (XSS) attacks. This vulnerability arises when the application fails to properly sanitize user inputs, potentially allowing attackers to inject malicious scripts. The risk is mitigated in version 3.5.1, which introduces the bluemonday HTML sanitizer, fortifying the application's defenses against XSS by ensuring that only safe HTML is rendered.