CVE-2018-0652

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory jvn.jp
advisory weseek.co.jp