CVE-2017-14621

Portus 2.2.0 has XSS via the Team field, related to typeahead...

CVE-2017-14621

Portus 2.2.0 has XSS via the Team field, related to typeahead...

CVE-2017-14621

Portus 2.2.0 is affected by an XSS vulnerability in the Team field (typeahead). The issue allows injection of arbitrary web script/HTML via the Team field. A remediation exists: SUSE-SU-2017:2655-1 security update for Portus, which fixes CVE-2017-14621. The vulnerability is listed with CVSS v3.0 ...

PT-2017-13587

Name of the Vulnerable Software and Affected Versions Portus version 2.2.0 Description The issue is related to a XSS vulnerability via the Team field, which is connected to the typeahead functionality. Recommendations For Portus version 2.2.0, consider disabling the typeahead functionality for th...

CVE-2017-14621: Improper Neutralization of Input During Web Page Generation

Portus 2.2.0 has XSS via the Team field, related to typeahead...

SUSE / Portus 2.2 Cross Site Scripting Vulnerability

SUSE/Portus version 2.2 suffers from a persistent cross site scripting vulnerability. Class Input Validation Error Remote Yes Stored Yes Credit rsanchezr Vulnerable SUSE/Portus 2.2 - https://github.com/SUSE/Portus Portus 2.2 is prone to a cross-site scripting vulnerability because it fails to...

SUSE/Portus 2.2 Cross Site Scripting

Class Input Validation Error Remote Yes Stored Yes Credit rsanchezr Vulnerable SUSE/Portus 2.2 - https://github.com/SUSE/Portus Portus 2.2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

SUSE-SU-2016:1146-1 Security update for portus

Portus was updated to version 2.0.3, which brings several fixes and enhancements: - Fixed crono job when a repository could not be found. - Fixed compatibility issues with Docker 1.10 and Distribution 2.3. - Handle multiple scopes in token requests. - Add optional fields to token response. - Fixe...