1 matches found
CVE-2015-1368: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Ansible Tower aka Ansible UI before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 orderby parameter to credentials/, 2 inventories/, 3 projects/, or 4 users/3/permissions/ in api/v1/ or the 5 nextrun parameter to...
4.3CVSS5.9AI score0.05153EPSS
SaveExploits2References2
20