CVE-2020-28364

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

CVE-2020-28364

CVE-2020-28364 describes a stored XSS vulnerability in Locust’s Web UI prior to version 1.3.2 when the UI is exposed to external users. The issue arises from the Web UI handling input insecurely, enabling an attacker to inject scripts via user-controlled data. Impact is limited to cases where the...

Hackable Cisco Phones, a Locust Invasion, and More News

Catch up on the most important news from today in two minutes or less...