PT-2021-11056
CVE-2020-24664
·
تاريخ النشر
2021-01-29
·
تاريخ التحديث
2021-02-04
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Hitachi Vantara Pentaho versions 7.x through 8.x
Description:
The dashboard Editor in Hitachi Vantara Pentaho contains a reflected Cross-site scripting issue, allowing authenticated remote users to execute arbitrary JavaScript code. The vulnerability is specifically located in the
pho:title attribute of the dashboardXml parameter.Recommendations:
For versions prior to 7.1.0.25, update to version 7.1.0.25 or later.
For versions prior to 8.2.0.6, update to version 8.2.0.6 or later.
For versions prior to 8.3.0.0 GA, update to version 8.3.0.0 GA or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾