Cross-Site Scripting (XSS)

oxidized-web is vulnerable to cross-site scripting. The vulnerability exists in confsearch.haml due to manipulation of the argument toresearch which allows an attacker to inject and execute arbitrary javascript...

CVE-2019-25088: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

Oxidized Web 跨站脚本漏洞

Oxidized Web is a Web UI + RESTful API for Oxidized. Oxidized Web suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameter toresearch can lead to cross-site scripting...