CVE-2018-8728

server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, as demonstrated by /codecode= in a URI...

CVE-2018-8728

The vulnerability CVE-2018-8728 affects Kontena prior to version 1.5.0, where server/app/views/static/code.html performs code display for the "+kontena master login --remote" page, allowing cross-site scripting via a crafted /code#code= URI. Affected component/file: server/app/views/static/code.h...