Cross site scripting

2023-01-0818:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

yanheven console

cross site scripting

openstack dashboard

patch

identifier

vdb-217651

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.7%

JSON

A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function get_zone_hosts/AvailabilityZonesTable of the file openstack_dashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can be launched remotely. The patch is named ba908ae88d5925f4f6783eb234cc4ea95017472b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217651.

CPENameOperatorVersion
consoleeq< 2014819

CPE	Name	Operator	Version
	console	eq	< 2014819

References

github.com/yanheven/console/commit/ba908ae88d5925f4f6783eb234cc4ea95017472b

vuldb.com/?ctiid.217651

vuldb.com/?id.217651