PT-2018-11140
CVE-2018-12355
·
تاريخ النشر
2018-06-13
·
تاريخ التحديث
2020-06-04
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Knowage (formerly SpagoBI) version 6.1.1
Description
The issue allows for XSS attacks through the
name or description field in the "Olap Schemas' Catalogue" catalogue.Recommendations
For Knowage (formerly SpagoBI) version 6.1.1, consider restricting input to the
name and description fields in the "Olap Schemas' Catalogue" catalogue to prevent XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾