Lucene search
GitHub Advisory DatabaseGHSA-79JR-8FHM-8WV3HistoryFeb 22, 2023 - 9:30 p.m.
OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
2023-02-2221:30:39
CWE-79
GitHub Advisory Database
github.com
16
0.001 Low
EPSS
Percentile
29.5%
Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.opennms:opennms | lt | 31.0.3 |
Related
cve
cve
CVE-2023-0846
2023-02-22 19:15:11
osv
osv
OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
2023-02-22 21:30:39
CVE-2023-0846
2023-02-22 19:15:11
cvelist
cvelist
CVE-2023-0846 Unauthenticated, stored XSS in display of alarm reduction-key
2023-02-22 18:35:19
prion
prion
Cross site scripting
2023-02-22 19:15:00
thn
thn