Munkireport munki_facts Cross-Site Scripting Vulnerability

Munkireport is a reporting tool for the Munki software management program. munkifacts is one of the custom data modules. A cross-site scripting vulnerability exists in munkifacts in MunkiReport prior to version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary web script o...

PT-2020-14682

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 1.5 Description A Cross-Site Scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is due to a vulnerability in the munki facts module, also known as Munki Conditions...