Cross site scripting

2023-01-1808:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

geni portal

patch application

vulnerability identifier

remote attack

nvd

0.002 Low

EPSS

Percentile

56.7%

JSON

A vulnerability classified as problematic has been found in GENI Portal. This affects the function no_invocation_id_error of the file portal/www/portal/sliceresource.php. The manipulation of the argument invocation_id/invocation_user leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 39a96fb4b822bd3497442a96135de498d4a81337. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218475.

CPENameOperatorVersion
geni-portaleq< 2020827

CPE	Name	Operator	Version
	geni-portal	eq	< 2020827

References

github.com/GENI-NSF/geni-portal/commit/39a96fb4b822bd3497442a96135de498d4a81337

github.com/GENI-NSF/geni-portal/pull/1824

vuldb.com/?ctiid.218475

vuldb.com/?id.218475

0.002 Low

EPSS

Percentile

56.7%

JSON

Related for PRION:CVE-2020-36654