NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44575)

NeDi Consulting NeDi is a suite of open source software that supports discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary JavaScri...

PT-2020-14129

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows an attacker to execute arbitrary JavaScript code via the "Topology-Map.php" xo parameter, enabling a cross-site scripting XSS attack. Recommendations For NeDi version 1.9C, consider disabling acce...

CVE-2020-15028: Improper Neutralization of Input During Web Page Generation

NeDi 1.9C is vulnerable to a cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter...