Cross-site Scripting (XSS)

2019-05-1601:42:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

45.6%

JSON

RHMAP is vulnerable to cross-site-scripting (XSS) attacks. An attacker could exploit a flaw in the App Studio component which allows an attacker to use this flaw to execute a stored XSS attack on an application administrator using App Studio.

CPENameOperatorVersion
rediseq2.8.15__2.el7ost
rediseq2.8.21__1.el7ost
fh-system-dump-tooleq1.0.0__4.el7
supervisoreq3.0__2.el7cp
supervisoreq3.0__1.el7cp
nagioseq4.0.8__4.el7map
nagioseq3.5.1__6.el7
nagioseq4.0.8__7.el7map
nagioseq3.5.1__9.el7
rhmap-fh-openshift-templateseq4.4.3__2.el7

Name	Operator	Version
redis	eq	2.8.15__2.el7ost
redis	eq	2.8.21__1.el7ost
fh-system-dump-tool	eq	1.0.0__4.el7
supervisor	eq	3.0__2.el7cp
supervisor	eq	3.0__1.el7cp
nagios	eq	4.0.8__4.el7map
nagios	eq	3.5.1__6.el7
nagios	eq	4.0.8__7.el7map
nagios	eq	3.5.1__9.el7
rhmap-fh-openshift-templates	eq	4.4.3__2.el7