CVE-2020-26205

2020-10-2920:15:19

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machine_list view.

CPENameOperatorVersion
saleq2.4.0.514
saleq3.2.7
saleq2.0.0
saleq2.4.0.542
saleq2.4.0.518
saleq2.7.1
saleq3.3.8
saleq3.2.5
saleq3.3.5
saleq2.3.1

Name	Operator	Version
sal	eq	2.4.0.514
sal	eq	3.2.7
sal	eq	2.0.0
sal	eq	2.4.0.542
sal	eq	2.4.0.518
sal	eq	2.7.1
sal	eq	3.3.8
sal	eq	3.2.5
sal	eq	3.3.5
sal	eq	2.3.1

Rows per page:

1-10 of 1011

References

github.com/salopensource/sal/commit/145bb72daf8460bdedbbc9fb708d346283e7a568

github.com/salopensource/sal/pull/405