Lucene search

K
osvGoogleOSV:CVE-2018-10314
HistoryMay 10, 2018 - 3:29 a.m.

CVE-2018-10314

2018-05-1003:29:00
Google
osv.dev
6

EPSS

0.001

Percentile

43.0%

Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Discover -> Audit Scripts -> List Scripts -> Download section.

EPSS

0.001

Percentile

43.0%