PT-2011-1348
CVE-2009-5099
·
تاريخ النشر
2011-09-13
·
تاريخ التحديث
2018-10-10
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Pentaho BI Server versions 1.7.0.1062 and earlier
Description
The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the
outputType parameter.Recommendations
For versions 1.7.0.1062 and earlier, avoid using the
outputType parameter in affected API endpoints until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾