未評価
Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted na...
CVE-2018-10314
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Discover -> Audit Scripts -> List Scripts -> Download section.
参照URL
- report docs.google.com
- report exploit-db.com