CVE-2020-14333

The CVE-2020-14333 issue affects oVirt Engine Web UI (ovirt) versions 4.4 and earlier, where inadequate filtering of user-controllable parameters enables a reflected cross-site scripting (XSS) attack. The vulnerability can enable phishing, cookies or confidential data theft, or user impersonation...

CVE-2020-14333

A flaw was found in the web interface of ovirt-engine 4.4.2 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other...