Описание
MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability
A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name.
Пакеты
Наименование
munkireport/munki_facts
composer
Затронутые версииВерсия исправления
< 1.5
1.5
Связанные уязвимости
CVSS3: 6.1
nvd
больше 5 лет назад
A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name.