OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-0868 · ADVISORY
• OpenNMS/opennms#5740 · WEB
• OpenNMS/opennms commit a47e193 · WEB
• docs.opennms.com/meridian/2022/releasenotes/changelog.html · WEB
• OpenNMS/opennms · PACKAGE

Lỗ hổng khác của org.opennms:opennms-webapp

• CVE-2023-40314TRUNG BÌNH 6.1 Cross-site scripting in bootstrap.jsp in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential sess…
• CVE-2023-40312TRUNG BÌNH 5.2Multiple reflected XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.…
• CVE-2023-40311TRUNG BÌNH 4.8Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2…
• CVE-2023-0870TRUNG BÌNH 6.7A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow a…