OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0846US | medium6.1 | — | ||
Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confident… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13WEB
- https://github.com/OpenNMS/opennmsPACKAGE
- https://github.com/OpenNMS/opennms/pull/5506/filesWEB
- https://issues.opennms.org/browse/NMS-14877WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-0846ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan