Описание
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ocsinventory-server | unfixed | package |
Примечания
https://fluidattacks.com/advisories/creed/
https://github.com/OCSInventory-NG/OCSInventory-ocsreports/pull/1545
https://github.com/OCSInventory-NG/OCSInventory-ocsreports/commit/78b5545b0a2e3e484605d9364424d6b924897aaf (2.12.1)
https://github.com/OCSInventory-NG/OCSInventory-ocsreports/commit/91780aefb904c9eac114e99246b3bef0d4e7d83c (2.12.1)
Only supported behind an authenticated HTTP zone
EPSS
Связанные уязвимости
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
EPSS