Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:24 p.m.20 views

MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.7AI score0.01161EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/24 5:24 p.m.12 views

GHSA-X9Q4-5F3C-CW62 MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References6
NVD
NVD
added 2020/07/23 2:15 p.m.22 views

CVE-2020-15881

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References4
OSV
OSV
added 2020/07/23 2:15 p.m.14 views

CVE-2020-15881

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.7AI score
SaveExploits0References4
CVE
CVE
added 2020/07/23 1:49 p.m.43 views

CVE-2020-15881

CVE-2020-15881 affects the munki_facts module (aka Munki Conditions) in MunkiReport, with all versions before 1.5 vulnerable to stored/reflected XSS via the key name. The vulnerability allows remote attackers to inject arbitrary web script or HTML, potentially impacting the web interface and user...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder