CVE-2020-15881

CVE-2020-15881 affects the munki_facts module (aka Munki Conditions) in MunkiReport, with all versions before 1.5 vulnerable to stored/reflected XSS via the key name. The vulnerability allows remote attackers to inject arbitrary web script or HTML, potentially impacting the web interface and user...