CVE-2018-14493

2018-07-2523:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.893 High

EPSS

Percentile

98.8%

JSON

Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.

CPENameOperatorVersion
open-auditeqOpen-AudIT_2.2.5
open-auditeqOpen-AudIT_2.0.4
open-auditeqOpen-AudIT_2.0.1-1
open-auditeqOpen-AudIT_2.0.10
open-auditeqOpen-AudIT_2.2.4
open-auditeqOpen-AudIT_2.0.8
open-auditeqOpen-AudIT_1.12.2_1
open-auditeqOpen-AudIT_1.12.6
open-auditeqOpen-AudIT_1.12.8.2
open-auditeqOpen-AudIT_1.14.2

Name	Operator	Version
open-audit	eq	Open-AudIT_2.2.5
open-audit	eq	Open-AudIT_2.0.4
open-audit	eq	Open-AudIT_2.0.1-1
open-audit	eq	Open-AudIT_2.0.10
open-audit	eq	Open-AudIT_2.2.4
open-audit	eq	Open-AudIT_2.0.8
open-audit	eq	Open-AudIT_1.12.2_1
open-audit	eq	Open-AudIT_1.12.6
open-audit	eq	Open-AudIT_1.12.8.2
open-audit	eq	Open-AudIT_1.14.2