mcholste Enterprise Log Search and Archive Cross-Site Scripting Vulnerability

mcholste Enterprise Log Search and Archive ELSA is an enterprise log search and archive system. A cross-site scripting vulnerability exists in the index view in mcholste ELSA version 1205, commit 2cc17f1 and earlier. A remote attacker can leverage the 'type', 'name', and 'value' parameters in...

PT-2018-9219

Name of the Vulnerable Software and Affected Versions: mcholste Enterprise Log Search and Archive ELSA version revision 1205, commit 2cc17f1 and earlier Description: The issue is related to a Cross Site Scripting XSS vulnerability in the index view / that can be exploited via payload delivered...