Cisco Crosswork Change Automation Cross-Site Scripting Vulnerability

Cisco Crosswork Change Automation is an automated deployment solution for network devices from Cisco. A security vulnerability exists in the web management interface in Cisco Crosswork Change Automation Releases prior to 3.1, which stems from the interface failing to adequately validate...

Cisco Crosswork Change Automation CVE-2019-16024 Cross Site Scripting Vulnerability

Description Cisco Crosswork Change Automation is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...