CVE-2024-10033
Aap-gateway: xss on aap-gateway
Résumé
Aap-gateway: xss on aap-gateway
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious user to perform actions that impact users by using the "?next=" in a URL, which can lead to redirecting, injecting malicious script, stealing sessions and data.
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web access.redhat.com