Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4211
HistoryMay 09, 2017 - 2:29 a.m.

Cross-Site Scripting (XSS)

2017-05-0902:29:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.002

Percentile

58.5%

atlas-dashboardv2 is vulnerable to reflected cross-site scripting (XSS) attacks. The search function does not sanitize the search queries that are passed to the application, allowing a malicious user to inject and execute arbitrary javascript.

EPSS

0.002

Percentile

58.5%