CVE-2019-17504

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. A reflected Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter...

PT-2019-15177

Name of the Vulnerable Software and Affected Versions Kirona Dynamic Resource Scheduling DRS version 5.5.3.5 Description A reflected Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script. This is achieved via the "password" parameter in the "/osm/report/" API...

CVE-2019-17504: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. A reflected Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter...