CVE-2018-11649

Hue 3.12 contains a Cross-Site Scripting (XSS) vulnerability in the /pig/save/ name and script parameters. The CNVD/Red Hat/NVD entries describe an XSS that could allow injection of arbitrary web script or HTML, implying an impact to user sessions and partial integrity for affected deployments. R...