EUVD-2014-6143

Malware in sbrugna...

Cross site scripting

Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407...