CVE-2015-3443

CVE-2015-3443 describes a stored cross-site scripting (XSS) vulnerability in Thycotic Secret Server. The issue affects Secret Server versions 8.6.x, 8.7.x, and 8.8.x prior to 8.8.000005, where a specially crafted password in the basic dashboard can trigger script execution when the password mask ...