3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata."...
PT-2014-3070
Name of the Vulnerable Software and Affected Versions SpagoBI versions prior to 4.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short...
CVE-2013-6233: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata."...