CVE-2015-10072

CVE-2015-10072 affects NREL api-umbrella-web 0.7.1. The Flash Message Handler contains a flaw enabling cross-site scripting that can be triggered remotely. A fix is available in version 0.8.0; the patch is identified as bcc0e922c61d30367678c8f17a435950969315cd. References confirm the vulnerabilit...