Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 5:24 p.m.•27 views

MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.7AI score0.01161EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/05/24 5:24 p.m.•23 views

GHSA-X9Q4-5F3C-CW62 MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References6
NVD
NVD
•added 2020/07/23 2:15 p.m.•32 views

CVE-2020-15881

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References4
OSV
OSV
•added 2020/07/23 2:15 p.m.•19 views

CVE-2020-15881

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS5.7AI score
SaveExploits0References4
Mend
Mend
•added 2020/07/23 1:49 p.m.•9 views

CVE-2020-15881

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS0.01161EPSS
SaveExploits0References6
CVE
CVE
•added 2020/07/23 1:49 p.m.•55 views

CVE-2020-15881

CVE-2020-15881 affects the munki_facts module (aka Munki Conditions) in MunkiReport, with all versions before 1.5 vulnerable to stored/reflected XSS via the key name. The vulnerability allows remote attackers to inject arbitrary web script or HTML, potentially impacting the web interface and user...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/23 12:00 a.m.•8 views

CVE-2020-15881: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...

6.1CVSS6AI score0.01161EPSS
SaveExploits0References2
Rows per page
Query Builder