CVE-2024-10033
Aap-gateway: xss on aap-gateway
概要
Aap-gateway: xss on aap-gateway
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious user to perform actions that impact users by using the "?next=" in a URL, which can lead to redirecting, injecting malicious script, stealing sessions and data.
参照URL
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web access.redhat.com