CVE-2020-15883

2020-07-2314:15:12

Google

osv.dev

cross-site scripting

munkireport

managedinstalls

remote attackers

web script

html

installed packages

versions

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (through which installed packages names and versions are reported).