Munkireport Cross-Site Scripting Vulnerability

Munkireport is a reporting client for munki. A cross-site scripting vulnerability exists in Munkireport versions prior to 5.3.0. An attacker can exploit this vulnerability to inject javascript into the MunkiReport database via the /report/brokenclient endpoint...

CVE-2020-10192

An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/brokenclient endpoint. The payload will be executed by any authenticated users browsing the application. This concerns app/views/listings/default.php...

CVE-2020-10192

An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/brokenclient endpoint. The payload will be executed by any authenticated users browsing the application. This concerns app/views/listings/default.php...

PT-2020-11965

Name of the Vulnerable Software and Affected Versions Munkireport versions prior to 5.3.0.3923 Description An issue was discovered that allows an unauthenticated actor to send a custom XSS payload through the "/report/broken client" endpoint. The payload will be executed by any authenticated user...